[MEDIUM] Sulu vulnerable to XXE in SVG File upload Inspector

PKSA-tptv-6vj5-qz52 CVE-2025-47778 GHSA-f6rx-hf55-4255

Affected package: sulu/sulu

Affected version: >=3.0.0-alpha1,<3.0.0-alpha3|>=2.6.5,<2.6.9|>=2.5.21,<2.5.25

Reported by:
GitHub