medium5.4
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.
Impact
Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codervivek | Vigybag | through 1.0 |