CVE-2025-45002: Codervivek Vigybag

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.

Affected products

• Codervivek Vigybag: up to and including 1.0

Published 2025-06-09. Last modified 2026-06-17.