—
DRUPAL-CONTRIB-2022-028
Details
SVG Formatter module provides support for using SVG images on your website.
Our dependency library enshrined/svg-sanitize has a cross-site scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with permission that enables them to upload SVG images.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/svg_formatter
Introduced in:
0Fixed in: 1.17.0Upgrade drupal/svg_formatter to 1.17.0 or newer (ecosystem packagist:https://packages.drupal.org/8).