Lucene search
RasiPATCHSTACK:C3185BDEF82E92990B0749B3F29A440EHistoryJun 14, 2021 - 12:00 a.m.
WordPress WP SVG images plugin <= 3.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability via uploaded SVG file
2021-06-1400:00:00
Rasi
patchstack.com
5
0.001 Low
EPSS
Percentile
25.0%
Authenticated Stored Cross-Site Scripting (XSS) vulnerability via uploaded SVG file discovered by Rasi in WordPress WP SVG images plugin (versions <= 3.3).
Solution
Update the WordPress WP SVG images plugin to the latest available version (at least 3.4).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp svg images | le | 3.3 |
Related
nvd
nvd
CVE-2021-24386
2021-07-06 11:15:08
cvelist
cvelist
wpexploit
wpexploit
WP SVG Images < 3.4 - Authenticated (author+) Stored XSS via SVG
2021-06-14 00:00:00
prion
prion
Design/Logic Flaw
2021-07-06 11:15:00
wpvulndb
wpvulndb
WP SVG Images < 3.4 - Authenticated (author+) Stored XSS via SVG
2021-06-14 00:00:00
cve
cve
CVE-2021-24386
2021-07-06 11:15:08