IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-10-20 15:15

MODIFIED

2025-10-20 15:15

EPSS (Prob. Exploit)

0.60%

Top 52.0%

DATA SOURCES:

NVD 🔗 2025-10-20 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04

> DESCRIPTION

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-4vrf-42cm-7xfw LOW

TastyIgniter vulnerable to Cross-Site Scripting

AFFECTED PACKAGES:

COMPOSER / tastyigniter/tastyigniter

<= 3.7.7

> HISTORIQUE DES MODIFICATIONS

Première apparition

20/10/2025 15:15

Source: NVD

📊 ENRICHISSEMENT 20/10/2025 16:45

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 1 Dernière mise à jour: 1 year ago

> REFERENCES

https://github.com/mg7-x/CVEs/blob/main/CVE-2025-61417/README.md