A vulnerability, which was classified as problematic, has been found in plone.namedfile. This affects an unknown part of the component SVG Image Handler. The manipulation of the argument File/Image leads to cross site scripting.
This vulnerability is listed as CVE-2023-41048. The attack may be initiated remotely. There is no available exploit.
It is advisable to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2023-41048 | plone.namedfile SVG Image File/Image cross site scripting (GHSA-jj7c-jrv4-c65x / Nessus ID 300605)
A vulnerability, which was classified as problematic, has been found in plone.namedfile. This affects an unknown part of the component SVG Image Handler. The manipulation of the argument File/Image leads to cross site scripting. This…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR