bww URL Image Importer

• CVE-2025-14120 Medium 6.4 URL Image Importer <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.2%
• CVE-2025-12138 High 8.8 URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload 0.7%