CVE-2025-64759

CVE-2025-64759 is a high-severity stored Cross-Site Scripting (XSS) vulnerability in Homarr, an open-source dashboard, affecting versions prior to 1.43.3. An attacker can execute arbitrary JavaScript in a user's browser by uploading a malicious SVG file, potentially leading to full administrative access if an administrator views the compromised page. The CVSS score is 8.1 (HIGH), indicating a network-based attack with low complexity but requiring user interaction and high privileges, resulting in high confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.