Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-56515 — Cross-Site Scripting (XSS) Vulnerability in Fiora Chat Application | Kitploit
Tools/GitHubGitHub/kov404/cve-2025-56515
Vulnerability AnalysisCode AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubkov404/cve-2025-56515

CVE-2025-56515

Cross-Site Scripting (XSS) Vulnerability in Fiora Chat Application

View Repository
10 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-56515

Cross-Site Scripting (XSS) Vulnerability in Fiora Chat Application

CVE-2025-56515: Cross-Site Scripting (XSS) Vulnerability in Fiora Chat Application

Vulnerability Overview

CVE ID: CVE-2025-56515
Vulnerability Type: Cross-Site Scripting (XSS)
Attack Type: Remote
Impact: Code Execution
Affected Product: Fiora Chat Application (Version 1.0.0)
Vendor: suisuijiang
Discoverer: Kaio Mendonça Pereira
Vendor Confirmed: Yes
References:

  • Fiora GitHub Repository
  • Fiora Application
  • CWE-79: Improper Neutralization of Input During Web Page Generation

Description

The Fiora chat application (version 1.0.0) is vulnerable to a Cross-Site Scripting (XSS) attack due to improper validation of SVG file content uploaded through the user avatar modification functionality. Authenticated users can upload malicious SVG files containing embedded <foreignObject> elements with `

Download Tool