DRUPAL-CONTRIB-2020-008
SVG Image module allows to upload SVG files.
The module did not sufficiently protect against malicious code inside SVG files leading to a Cross Site Scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to upload an SVG file.
What each source reports
OSV No score
SVG Image module allows to upload SVG files.
The module did not sufficiently protect against malicious code inside SVG files leading to a Cross Site Scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to upload an SVG file.
- Record
DRUPAL-CONTRIB-2020-008- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/svg_imagePackagist:https://packages.drupal.org/8 |
before 1.10.0 | 1.10.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2020-008 is a vulnerability with no CVSS score yet in drupal/svg_image, published March 25, 2020. No source lists public exploit code. Fixed in drupal/svg_image 1.10.0.