Vulnerability Details CVE-2025-63830
CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An attacker can upload a crafted SVG containing active content.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.1%
CVSS Severity
CVSS v3 Score 6.1
References