GHSA-275c-v3rc-xghx

ghsaUSosv

Kirby XSS Vulnerability

view advisory published 2022-05-14Licence: CC-BY-4.0

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-16807US	medium5.4	2.42% (84th)	Exploit	2017-11-13
A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has…

references

External citations — patches, advisories, analysis.

https://getkirby.com/changelog/kirby-2-5-7WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-16807ADVISORY
https://packetstormsecurity.com/files/144965/KirbyCMS-Cross-Site-Scripting.htmlWEB
https://www.exploit-db.com/exploits/43140WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan