Description
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | getkirby/kirby | <= 2.5.12 | — | GHSA-3gq5-r59m-mmv2 |
Medium · 4.8
CVE-2018-16630
EUVD-2022-2182GHSA-3gq5-r59m-mmv2
Kirby XSS Vulnerability
Published Dec 28, 2018 · Updated Aug 5, 2024 · Assigned by mitre