CVE-2018-16630
CVE-2018-16630
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
CVSS 4.8 · Medium · EPSS 0.6%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
getkirby/kirby Packagist
- Versions
- 2.4.0
- 2.4.1
- 2.4.2
- 2.5.0
- 2.5.1
- 2.5.10
- 2.5.11
- 2.5.11-RC-1
- 2.5.12
- 2.5.2
- 2.5.3
- 2.5.4
- 2.5.5
- 2.5.5-RC-1
- 2.5.6
- 2.5.6-RC-1
- 2.5.7
- 2.5.7-RC-1
- 2.5.8
- 2.5.8-RC-1
- 2.5.9
- 2.5.9-RC-1
- 2.5.9-RC-2
- Affected ranges
- ECOSYSTEM: ≤ 2.5.12
No fix published