Executive brief
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Affected products
- PyPI mobsf
Junglewise Threat Intelligence
CVE-2025-46335: PYSEC-2026-1675 - Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
CVE-2025-46335 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: mobsf (PyPI). Vendors: PyPI.