Unrated
Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.
CVE-2018-19600
First seen on SecPulse
References
- patch github.com
- report github.com