Advisories · Technology
SveltyCMS.
Every CVE that names SveltyCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
SveltyCMS File Upload Endpoint upload-media server-side request forgery
- SveltyCMS
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
SveltyCMS SVG Media Upload media-service.server.ts cross site scripting
- SveltyCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
SveltyCMS User Attribute Update Endpoint +server.ts access control
- SveltyCMS
- Privilege escalation
- Broken access control