https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T10:00:35.073630+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-72576 CVE-2026-72576 — Bludit - Stored Cross-Site Scripting via Malicious SVG Logo Upload 2026-10-05T10:00:35.745612+00:00

Affected: Bludit

A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user (Author role) to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo.