CVE-2025-10348 | Eveo URVE Smart Office up to 1.1.23 SVG File Parser cross site scripting

A vulnerability was found in Eveo URVE Smart Office up to 1.1.23 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SVG File Parser. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-10348. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.