Lucene search
HistoryJun 26, 2024 - 6:15 a.m.
CVE-2024-3633
cve-2024-3633
webp
svg
wordpress
plugin
sanitise
uploaded
author
malicious
xss
0.0004 Low
EPSS
Percentile
9.1%
The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
Related
wpexploit
wpexploit
WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
2024-06-05 00:00:00
cve
cve
CVE-2024-3633
2024-06-26 06:15:15
wpvulndb
wpvulndb
WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
2024-06-05 00:00:00
vulnrichment
vulnrichment
CVE-2024-3633 WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
2024-06-26 06:00:02
cvelist
cvelist
CVE-2024-3633 WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
2024-06-26 06:00:02