SvgViewer 1.1.6, Exif 1.2.3, CustomLogin 2.2.4, EmailTemplates 1.2.4 — four dashboards
asked people to type media GUIDs or URLs by hand and now use the media picker.

Exif also confines its file-path lookup to the site: a signed-in backoffice user could
previously name any path the site process could reach and learn whether it existed.