Vulnerability Details CVE-2025-13415
A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.4%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 4.0
References
Products affected by CVE-2025-13415
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:-
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.1.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.1.1
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.2.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.2.2
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.3.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.1
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.2
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.3
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.4
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.5
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.6
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.7
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.8
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.4.9
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.1
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.2
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.3
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.4
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.5
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.6
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.7
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.8
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.5.9
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.1
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.2
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.3
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.4
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.5
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.6
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.7
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.8
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.6.9
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.1
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.2
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.3
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.4
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.5
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.6
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.7
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.8
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.7.9
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.0
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.1
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.2
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.3
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.4
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.5
-
cpe:2.3:a:easyimages2.0_project:easyimages2.0:2.8.6