Symfonia Ready
4 CVEs affecting Symfonia Ready. Latest disclosed: 2025-04-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1983 | | 2025-04-16 | A cross-site scripting (XSS) vulnerability in Ready_'s File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected c… | |
CVE-2025-1982 | | 2025-04-16 | Local File Inclusion vulnerability in Ready's attachment upload panel allows low privileged user to provide link to a local file using the file:// protocol thu… | |
CVE-2025-1981 | | 2025-04-16 | Improper neutralization of input provided by a low-privileged user into a file search functionality in Ready_'s Invoices module allows for SQL Injection attack… | |
CVE-2025-1980 | | 2025-04-16 | The Ready_ application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconfigured, as it was… |