---
id: 4009
title: "FileStack Upload Advisory"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/filestack-upload-advisory"
published_at: "2022-06-23T00:00:00Z"
tags: ["web-security", "xss", "cross-site-scripting", "vulnerability-advisory", "filestack", "svg-upload"]
phying_url: "https://phying.com/item/4009"
lang: en
---

# FileStack Upload Advisory

## Summary

A FileStack advisory describing a cross-site scripting flaw: JavaScript embedded in uploaded SVG files executes in the cdn.filestackcontent.com origin; mitigations include CSP and sandboxing.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2022-06-23T00:00:00Z
- **Original:** https://bishopfox.com/blog/filestack-upload-advisory
- **Phying News:** https://phying.com/item/4009