org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.publisher.v1 vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.publisher.v1 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-12544Medium· 4.8

4d ago

Stored Cross-Site Scripting in Multiple WSO2 Products

The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role to inject malicious scripts. This weakness can be exploited by uploading a crafted SVG file, which is then stored and r…

▾ SunlitWSO2 · WSO2 API ManagerEPSS 0.20%via CVEORG