MEDIUM4.8

GHSA-3gq5-r59m-mmv2

Kirby XSS Vulnerability

Details

Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/getkirby/kirby

Introduced in: 0

No fixed version published yet for getkirby/kirby (composer). Pin to a known-safe version or switch to an alternative.

References