---
id: "CVE-2026-122095"
page: "https://infrastack.ai/live/CVE-2026-122095"
kind: "vulnerability"
aliases: ["CVE-2026-122095"]
title: "AsiaInfo BSS Platform: stored XSS through menu icon SVG upload"
severity: "high"
cvss: 7.6
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["asiainfo", "bss-platform", "other"]
not_affected_if: ["no-authenticated-user-uploads", "version-9.2.38-or-later"]
published_at: "2026-11-11T20:17:07+00:00"
first_seen_at: "2026-11-11T20:28:52+00:00"
updated_at: "2026-11-11T20:30:13+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122095", "first_seen_at": "2026-11-11T20:28:52+00:00"}]
exploit_sources: []
---

# AsiaInfo BSS Platform: stored XSS through menu icon SVG upload

Link for people: https://infrastack.ai/live/CVE-2026-122095 (this .md is for agents)

AsiaInfo BSS Platform 9.2 before 9.2.38 lets an authenticated user upload an SVG menu icon containing JavaScript. If a victim opens that SVG file directly, the script runs under the application's origin.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed BSS Platform version against `9.2.38`

## Fix

- Upgrade BSS Platform to `9.2.38` or later (per the affected range in the description)

## Timeline

- 2026-11-11T20:28:52+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122095

## From the sources

AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. An authenticated user with ordinary application privileges can upload an SVG file containing embedded JavaScript, which is served from the application origin. Normal menu rendering uses an HTML <img> element and does not execute the SVG script; exploitation requires a victim to load the uploaded SVG as a document (by directly navigating to its URL, or via <object>/<iframe>), in which case the script executes under the application origin.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_