1 matches found
GHSA-Q386-W6FG-GMGP XML External Entity (XXE) vulnerability in the XML data handler
TL;DR This vulnerability only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the affected methods. If you use an affected method and cannot rule out XML input controlled by an...