CVE-2025-41084 | Sesame SVG Image Upload /api/v3/companies//logo cross site scripting

January 20, 2026 Yanac

A vulnerability identified as problematic has been detected in Sesame. The impacted element is an unknown function of the file /api/v3/companies//logo of the component SVG Image Upload. Performing a manipulation of the argument logo results in cross site scripting.

This vulnerability is identified as CVE-2025-41084. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More