← CVE Intelligence

CVE-2025-3189

Stored Cross-Site Scripting (XSS) in DoWISP PUBLISHED

Description (CNA)

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.

Affected (CNA)

Vendor / productVersions
DoWISP / DoWISPaffected 0 before 1.16.2.50

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.