CVE-2026-93506 — SveltyCMS File Upload Endpoint upload-media server-side request forgery
A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Execu…
Published: 2026-09-18 · CVSS: 5.3 · CVSS 4.0
A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called 05b4f9efeb79e9d72a693232334d7529687f896f. It is best practice to apply a patch to resolve this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7