[MEDIUM] TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

PKSA-4g4t-fqh1-f8mt CVE-2026-27621 GHSA-xfvg-8v67-j7wp

Affected package: typicms/core

Affected version: <12.0.5|>=13.0.0,<13.0.9|>=14.0.0,<14.0.27|>=15.0.0,<15.0.29|>=16.0.0,<16.1.7

Reported by:
GitHub