CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-02
WSO2 API Manager Publisher Portal Stored XSS via SVG File Upload (CVE-2025-12544)
[Affected Scope] Users with the Publisher role in WSO2 API Manager
[Impact] Execution of malicious scripts leading to browser redirection, UI defacement, and information disclosure (mitigated by httpOnly flags on sensitive session cookies)
[Mitigation] Apply official WSO2 security patches and enforce strict Content-Security-Policy (CSP) headers for uploaded media.