SveltyCMS vulnerabilities
3 known CVE vulnerabilities in SveltyCMS, translated and rated.
- CVE-2026-93506Medium
A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called 05b4f9efeb79e9d72a693232334d7529687f896f. It is best practice to apply a patch to resolve this issue.
- CVE-2026-93505Low
SveltyCMS 0.0.6 contains a cross-site scripting (XSS) vulnerability in the SVG Media Upload component, in the file src/utils/media/media-service.server.ts. Input manipulation can lead to malicious script execution, and the attack can be initiated remotely.
- CVE-2026-93504Medium
A vulnerability in SveltyCMS 0.0.6 in the user attribute update endpoint allows improper access controls, letting a remote attacker modify user attributes without authorization. A patch is available as commit 05b4f9efeb79e9d72a693232334d7529687f896f.