[MEDIUM] Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius

PKSA-bdq8-12rq-1jxx CVE-2022-24749 GHSA-4qrp-27r3-66fj

Affected package: sylius/sylius

Affected version: >=1.11.0,<1.11.2|>=1.10.0,<1.10.11|<1.9.10

Reported by:
GitHub