CVE-2026-93505

LOW Status: Received

CVSS Scores

CVSS v3.x Base Score
3.5
LOW
CVSS v2 Base Score
4.0
MEDIUM

Description

A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-service.server.ts of the component SVG Media Upload. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The patch is named 05b4f9efeb79e9d72a693232334d7529687f896f. Applying a patch is the recommended action to fix this issue.

Published
September 18, 2026 3:17 PM
Last Modified
September 18, 2026 3:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-79 CWE-94

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.