CVE-2026-93504 | SveltyCMS 0.0.6 User Attribute Update Endpoint +server.ts access control

September 18, 2026 Yanac

A vulnerability was found in SveltyCMS 0.0.6. It has been declared as critical. This affects an unknown part of the file src/routes/api/[…path]/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls.

This vulnerability is referenced as CVE-2026-93504. It is possible to launch the attack remotely. No exploit is available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More