CVE-2018-16630: Improper Neutralization of Input During Web Page Generation

Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file...

PT-2018-13657

Name of the Vulnerable Software and Affected Versions Kirby version 2.5.12 Description The issue allows for XSS by utilizing the site files Add option to upload an SVG file. Recommendations For version 2.5.12, avoid using the Add option in site files to upload SVG files until a fix is available...