CVE-2026-42754: Favicon by RealFaviconGenerator Stored XSS (CVSS 7.2)

CVE-2026-42754 is a CVSS 7.2 High Stored XSS in Favicon by RealFaviconGenerator <= 1.3.46 that lets attackers inject scripts via SSRF into the admin panel.