GHSA-3gq5-r59m-mmv2

ghsaUSosv

Kirby XSS Vulnerability

view advisory published 2022-05-14Licence: CC-BY-4.0

Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-16630USmedium4.8—
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan