Lucene search

K
osvGoogleOSV:GHSA-275C-V3RC-XGHX
HistoryMay 14, 2022 - 12:55 a.m.

Kirby XSS Vulnerability

2022-05-1400:55:16
Google
osv.dev
7
xss
vulnerability
kirby panel
svg
content file

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

49.8%

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

49.8%