-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tribalsystems/zenario | composer | <= 9.3.57186 |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in two key areas: 1) SVG file processing during upload (Users & Contacts feature) where XML-based XSS payloads bypass sanitization, and 2) subsequent rendering of user-controlled SVG content. The combination suggests insufficient input validation in upload handlers and lack of output encoding in profile display components. The Users & Contacts context indicates user management controllers/views as the vulnerable area, with SVG-specific handling being the weak point given the attack vector.
Ongoing coverage of React2Shell