Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.Referenceshttps://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45002