Roastslav Quickdrop vulnerabilities

• roastslav quickdrop QuickDrop has stored XSS in SVG file preview endpoint allowing JavaScript execution CVE-2026-35608 5.3 MediumApril 7, 2026