Security Advisory

CVE-2022-23638

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-14 21:10:10
Last updated 2025-04-23 19:05:21
Assigner GitHub_M
State PUBLISHED

Description

svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.