medium5.4
CVE-2023-48202
Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the…
Impact
Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sunlight-Cms | Sunlight Cms | Version 8.0.1 |