PT-2018-13657

Name of the Vulnerable Software and Affected Versions Kirby version 2.5.12 Description The issue allows for XSS by utilizing the site files Add option to upload an SVG file. Recommendations For version 2.5.12, avoid using the Add option in site files to upload SVG files until a fix is available...