Approved changes feed: RSS · Atom
cpe:2.3:a:sveltycms:sveltycms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sveltycms (e9774e64-086b-5880-ad9a-37c15a125c63) |
|---|---|
| Product | Sveltycms (4a2828e5-0e18-56a7-8052-1a8123bc2ab1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93506 |
vulnerable | 2026-10-13 12:28:56.122189 |
SveltyCMS File Upload Endpoint upload-media server-side request forgery
MEDIUM (6.3)
A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called 05b4f9efeb79e9d72a693232334d7529687f896f. It is best practice to apply a patch to resolve this issue.
Published: 2026-09-18T14:45:14.943Z
Updated: 2026-09-22T14:39:11.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93505 |
vulnerable | 2026-10-13 12:28:55.865739 |
SveltyCMS SVG Media Upload media-service.server.ts cross site scripting
LOW (3.5)
A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-service.server.ts of the component SVG Media Upload. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The patch is named 05b4f9efeb79e9d72a693232334d7529687f896f. Applying a patch is the recommended action to fix this issue.
Published: 2026-09-18T14:15:14.213Z
Updated: 2026-09-18T15:43:38.878Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.