Lucene search
HistoryJul 25, 2022 - 1:15 p.m.
CVE-2022-2299
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
24.9%
The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
Affected configurations
Node
allow_svg_files_projectallow_svg_filesMatch1.0wordpress
ORallow_svg_files_projectallow_svg_filesMatch1.1wordpress
Related
cve
cve
CVE-2022-2299
2022-07-25 13:15:08
prion
prion
Design/Logic Flaw
2022-07-25 13:15:00
patchstack
patchstack
cvelist
cvelist
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
24.9%
Related for NVD:CVE-2022-2299