CVE-2026-116202: Php Stored Xss Unsanitized File Uploadcve-2026-116202-php-stored-xss-unsanitized-file-upload
Uploaded file content is persisted verbatim: move_uploaded_file() copies $_FILES[...]['tmp_name'] into $DEST and the surrounding function never sanitizes the stored file. Upload endpoints commonly accept .svg (and .html), and a stored .svg is served back as image/svg+xml, so attacker-supplied <script> or onload= markup executes in the site origin for every u
