johanaarstein
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AM LottiePlayer | 2 | – | Apr 8, 2026 |
Exploited and recent CVEs
- CVE-2025-1794 AM LottiePlayer <= 3.6.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG 0.2%
- CVE-2025-1529 AM LottiePlayer <= 3.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Lottie File 0.2%