[MEDIUM] Kirby vulnerable to unrestricted file upload of user avatar images

PKSA-yxtp-sp4n-y3tf CVE-2024-26483 GHSA-xrvh-rvc4-5m43

Affected package: getkirby/cms

Affected version: >=4.0.0,<=4.1.0|=3.10.0|>=3.9.0,<=3.9.8|>=3.8.0,<=3.8.4.2|>=3.7.0,<=3.7.5.3|<=3.6.6.4

Reported by:
GitHub