{"id":"CVE-2026-104475","summary":"IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload","details":"IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoints, which execute in victims' browsers when served from the /public route.","modified":"2026-10-04T02:45:59.384507116Z","published":"2026-10-02T23:28:46.132Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104475.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104475.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104475"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/idurar-erp-crm-through-4.1.1-stored-xss-via-svg-upload"},{"type":"REPORT","url":"https://github.com/idurar/idurar-erp-crm/issues/1414"},{"type":"PACKAGE","url":"https://github.com/idurar/idurar-erp-crm"},{"type":"ARTICLE","url":"https://github.com/idurar/idurar-erp-crm/blob/4.1.1/backend/src/middlewares/uploadMiddleware/utils/fileFilterMiddleware.js"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/idurar/idurar-erp-crm","events":[{"introduced":"0"},{"fixed":"82ff5d1bcb8aa5a3feda5e7f94d71ba00d3a1a50"}],"database_specific":{"source":["AFFECTED_FIELD","DESCRIPTION"],"extracted_events":[{"introduced":"0"},{"last_affected":"4.1.1"},{"fixed":"4.1.1"}]}}],"versions":["4.1.0","4.0.0-beta.3","4.0.0-beta.2","4.0.0-beta.1","3.1.4","3.1.3","3.1.2","3.1.1","3.1.0","3.0.1","3.0.0","3.0.0-beta.11","3.0.0-beta.10","3.0.0-beta.9","3.0.0-beta.8","3.0.0-beta.7","3.0.0-beta.6","3.0.0-beta.5","3.0.0-beta.4","3.0.0-beta.3","3.0.0-beta.1","3.0.0-beta.2","3.0.0.beta","2.1.0","2.0.1","2.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104475.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"}]}