All vulnerabilities

Servers and applications

GHSA-52cw-pvq9-9m5v

TinyMCE allows svg files linked in object tags

Severity
Medium 5.4
Published
17 Jul 2024
Last changed
17 Jul 2024
Added to UpHeron
3 Nov 2026
Fixed in
5.2.16
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Silverstripe CMSServers and applications · github:silverstripe/silverstripe-framework
  • Every version before 5.2.16

References