← All advisories

Medium severity4.8OSV Advisory· Published Dec 28, 2018· Updated Jun 17, 2026

CVE-2018-16630

CVE-2018-16630

Description

Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
getkirby/kirbyPackagist	<= 2.5.12	—

Affected products

3

Getkirby/PanelOSV
Range: 2.0.0, 2.0.2, 2.0.3, …
Getkirby/Kirby
cpe:2.3:a:getkirby:kirby:2.5.12:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/getkirby/kirby
Range: <= 2.5.12

Patches

Vulnerability mechanics

References

4

github.com/security-breachlock/CVE-2018-16630/blob/master/Kirby_Insecure%20file%20validation.pdfnvdExploitThird Party Advisory
github.com/advisories/GHSA-3gq5-r59m-mmv2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-16630ghsaADVISORY
web.archive.org/web/20201208015414/https://github.com/security-breachlock/CVE-2018-16630/blob/master/Kirby_Insecure%20file%20validation.pdfghsaWEB

News mentions

0

No linked articles in our index yet.