CVE-2022-4022

🗓️ 16 Nov 2022 13:23:44Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 56 Views

SVG Support plugin for WordPress v2.5 and v2.5.1 defaults to insecure settings, allowing authenticated attackers to upload and embed malicious SVG files

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-4022	16 Nov 202214:15	–	attackerkb
Circl	CVE-2022-4022	17 Nov 202216:02	–	circl
CNNVD	WordPress plugin SVG Support 跨站脚本漏洞	16 Nov 202200:00	–	cnnvd
CNVD	WordPress SVG Support Cross-Site Scripting Vulnerability	18 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-4022	16 Nov 202213:23	–	cvelist
EUVD	EUVD-2022-51401	3 Oct 202520:07	–	euvd
NVD	CVE-2022-4022	16 Nov 202214:15	–	nvd
OpenVAS	WordPress SVG Support Plugin 2.5 - 2.5.1 XSS Vulnerability	25 Nov 202200:00	–	openvas
OSV	CVE-2022-4022	16 Nov 202214:15	–	osv
Prion	Code injection	16 Nov 202214:15	–	prion

NVD

Vulners

Node

benbodhi svg_supportRange2.5.0–2.5.2wordpress

[
  {
    "vendor": "benbodhi",
    "product": "SVG Support",
    "versions": [
      {
        "version": "2.5",
        "status": "affected"
      },
      {
        "version": "2.5.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]