Description
Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Improper Authentication Vulnerability (CVE-2021-38161)
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-5766)
MySQL CVE-2021-2179 Vulnerability (CVE-2021-2179)
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Scripting (0.7.12)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5481)