Lucene search
Luan PedersiniPATCHSTACK:CC01B47DFAD304F70EEC45B916AFC06CHistoryMay 03, 2022 - 12:00 a.m.
WordPress Enable SVG plugin <= 1.3.1 - Stored Cross-Site Scripting (XSS) vulnerability via SVG
2022-05-0300:00:00
Luan Pedersini
patchstack.com
11
0.001 Low
EPSS
Percentile
24.8%
Stored Cross-Site Scripting (XSS) vulnerability via SVG discovered by Luan Pedersini in WordPress Enable SVG plugin (versions <= 1.3.1).
Solution
Update the WordPress Enable SVG plugin to the latest available version (at least 1.4.0).
| CPE | Name | Operator | Version |
|---|---|---|---|
| enable svg | le | 1.3.1 |
Related
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-05-30 09:15:00
wpexploit
wpexploit
Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG
2022-05-03 00:00:00
wpvulndb
wpvulndb
Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG
2022-05-03 00:00:00
nvd
nvd
CVE-2022-1562
2022-05-30 09:15:09
cve
cve
CVE-2022-1562
2022-05-30 09:15:09