CVE-2025-13415: EASYIMAGES2.0 Project EASYIMAGES2.0

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.

Affected products

• EASYIMAGES2.0 Project EASYIMAGES2.0: up to and including 2.8.6

Published 2025-11-19. Last modified 2026-06-17.