—
DRUPAL-CONTRIB-2020-008
Details
SVG Image module allows to upload SVG files.
The module did not sufficiently protect against malicious code inside SVG files leading to a Cross Site Scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to upload an SVG file.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/svg_image
Introduced in:
0Fixed in: 1.10.0Upgrade drupal/svg_image to 1.10.0 or newer (ecosystem packagist:https://packages.drupal.org/8).