NuytsTech Security

CVE-2025-55944

by ·

Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user views the shared image in a new browser tab, the embedded JavaScript executes. The issue affects both authenticated and unauthenticated users.

More information : https://github.com/G3XAR/Vulnerability-Research/tree/main/CVE-2025-55944

Tags: