Description

Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.

Remediation

References

CVE-2017-9516

Related Vulnerabilities

WordPress Plugin Captcha by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (4.0.2)

WordPress Plugin NextCellent Gallery-NextGEN Legacy Cross-Site Scripting (1.9.27)

WordPress Plugin WordPress Download Manager Cross-Site Scripting (3.2.21)

Apache HTTP Server CVE-2016-5387 Vulnerability (CVE-2016-5387)

Moment.js Other Vulnerability (CVE-2022-31129)

Severity

Medium

Classification

CVE-2017-9516 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities