WordPress Allow SVG Plugin < 1.2.0 is vulnerable to Cross Site Scripting (XSS)

🗓️ 29 Jan 2024 00:00:00Reported by Bob MatyasType

WordPress Allow SVG Plugin < 1.2.0 Cross Site Scripting (XSS

Reporter	Title	Published	Views	Family All 3
wpexploit	Allow SVG < 1.2.0 - Author+ Stored XSS via SVG	27 Jan 202400:00	–	wpexploit
WPVulnDB	Allow SVG < 1.2.0 - Author+ Stored XSS via SVG	27 Jan 202400:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 22, 2024 to January 28, 2024)	1 Feb 202415:49	–	wordfence

Vulners

Node

allow_svg_files_project allow_svg_filesRange<1.2.0wordpress

Source	Link
cve	www.cve.org/CVERecord
bobmatyas	www.bobmatyas.com/
wpscan	www.wpscan.com/vulnerability/bbe866b8-7497-4e5c-8f59-bb8edac1dc71/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Jan 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8