CVE-2024-13141 | osuuu LightPicture up to 1.2.2 SVG File Upload /api/upload file cross site scripting

A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting.

This vulnerability was named CVE-2024-13141. The attack can be initiated remotely. Furthermore, there is an exploit available.