---
id: CVE-2025-11027
title: A vulnerability was identified in givanz Vvveb up to 1.0.7.2
summary: >-
  A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this
  issue is some unknown functionality of the component SVG File Handler. Such
  manipulation leads to cross site scripting. The attack may be launched
  remotely. T…
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-79
  - CWE-94
  - CWE-79
vendor: vvveb
product: vvveb
affected:
  - vvveb <= 1.0.7.2
published: '2025-09-26'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11027'
references:
  - url: 'https://gist.github.com/KhanMarshaI/b90045ee823866a52f33615776b5a6ec'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.325965'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.325965'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.657184'
    label: cna@vuldb.com
  - url: 'https://gist.github.com/KhanMarshaI/b90045ee823866a52f33615776b5a6ec'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00279
epssPercentile: 0.18691
ingestedAt: '2026-10-09T12:53:27.698Z'
---

## Overview

A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of the component SVG File Handler. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."

## Affected

- `vvveb <= 1.0.7.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.