GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

SpawnZii working with YesWeHack

2 vulnerability records and advisories credit this contributor.

CVE-2025-4648
A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
CVE-2025-4647
A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG