Lucene search

K
patchstackChafik AmraouiPATCHSTACK:D85E2786F265BB3E5FC6531AE7559C7E
HistorySep 05, 2022 - 12:00 a.m.

WordPress SVG Support plugin <= 2.4.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2022-09-0500:00:00
Chafik Amraoui
patchstack.com
9
wordpress
svg support
plugin
cross-site scripting
chafik amraoui

0.001 Low

EPSS

Percentile

24.8%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Chafik Amraoui in WordPress SVG Support plugin (versions <= 2.4.2).

Solution

           Update the WordPress SVG Support plugin to the latest available version (at least 2.5).
CPENameOperatorVersion
svg supportle2.4.2

0.001 Low

EPSS

Percentile

24.8%

Related for PATCHSTACK:D85E2786F265BB3E5FC6531AE7559C7E