PT-2018-13657
CVE-2018-16630
·
تاريخ النشر
2018-12-28
·
تاريخ التحديث
2022-05-14
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Kirby version 2.5.12
Description
The issue allows for XSS by utilizing the site files Add option to upload an SVG file.
Recommendations
For version 2.5.12, avoid using the Add option in site files to upload SVG files until a fix is available. Consider restricting access to the file upload feature to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾