CVE-2025-61681

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-61681
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61681.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-61681
Aliases
  • GHSA-q3w2-2vqp-gx3r
Published
2025-10-03T21:46:59.313Z
Modified
2026-04-10T05:33:47.108138Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Kuno is Vulnerable to Stored XSS Attack via SVG File Upload
Details

KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and extension whitelist restrictions, allowing attackers to upload SVG files containing malicious scripts (disguised as images). When users access the uploaded resource pages, arbitrary JavaScript executes in their browsers. This issue is fixed in version 1.3.14.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61681.json",
    "cwe_ids": [
        "CWE-434",
        "CWE-79"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/xuemian168/kuno

Affected ranges

Type
GIT
Repo
https://github.com/xuemian168/kuno
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fc486b5c9091b607f82bf7b354d18f25204f7dc6
Type
GIT
Repo
https://github.com/xuemian168/kuno
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ec6c7326b7695696be5e6eaf8970150300d8d83e

Affected versions

v1.*
v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.0.8
v1.1.0
v1.1.3
v1.1.5
v1.1.6
v1.1.8
v1.1.9
v1.2.0
v1.2.1
v1.2.11
v1.2.12
v1.2.13
v1.2.14
v1.2.15
v1.2.16
v1.2.17
v1.2.18
v1.2.19
v1.2.2
v1.2.21
v1.2.22
v1.2.23
v1.2.24
v1.2.25
v1.2.26
v1.2.27
v1.2.28
v1.2.29
v1.2.31
v1.2.32
v1.2.4
v1.2.5
v1.2.6
v1.2.7
v1.2.9
v1.3.0
v1.3.1
v1.3.11
v1.3.12
v1.3.13
v1.3.2
v1.3.3
v1.3.4
v1.3.5
v1.3.6
v1.3.7
v1.3.8
v1.3.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61681.json"