Cross-Site Scripting Vulnerability in Taclia Web Application by Taclia

CVE-2025-41087

What is CVE-2025-41087?

The Taclia web application is vulnerable to a Cross-Site Scripting (XSS) attack due to improper sanitization of uploaded SVG images. Attackers can exploit this flaw by embedding malicious scripts within SVG files, which are then stored on the server. When users access these compromised resources, the embedded scripts are executed in the context of their session, potentially leading to unauthorized actions or data exposure.

References