Shubham03007/CVE-2025-63830

Shubham03007/CVE-2025-63830

GitHubGitHub
GitHubgithub.com
Releases0
Identified a Stored Cross-Site Scripting (XSS) vulnerability in CKFinder v1.4.3 via malicious SVG file upload leading to script execution upon file preview.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-63830↗
6.1 MEDIUM—

CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An attacker can upload a crafted SVG containing active content.