Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-93506

SveltyCMS File Upload Endpoint upload-media server-side request forgery

Description

A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called 05b4f9efeb79e9d72a693232334d7529687f896f. It is best practice to apply a patch to resolve this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a SveltyCMS

  • 0.0.6affected

References