Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-48202 EUVD-2023-52282GHSA-c2jp-pq2c-g7jh

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a cra…

Published Jan 27, 2024 · Updated May 29, 2025 · Assigned by mitre

Description

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component.

References