Lucene search
PRIOn knowledge basePRION:CVE-2022-1091HistoryApr 18, 2022 - 6:15 p.m.
Cross site request forgery (csrf)
2022-04-1818:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
36.9%
The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).
Related
wpexploit
wpexploit
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
2022-03-25 00:00:00
github
github
Cross site scripting in safe-svg
2022-04-19 00:00:45
cvelist
cvelist
CVE-2022-1091 Safe SVG < 1.9.10 - SVG Sanitisation Bypass
2022-04-18 17:10:54
nvd
nvd
CVE-2022-1091
2022-04-18 18:15:09
openvas
openvas
WordPress Safe SVG Plugin < 1.9.10 Contet-Type Bypass Vulnerability
2023-09-18 00:00:00
osv
osv
Cross site scripting in safe-svg
2022-04-19 00:00:45
CVE-2022-1091
2022-04-18 18:15:09
wpvulndb
wpvulndb
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
2022-03-25 00:00:00
cve
cve
CVE-2022-1091
2022-04-18 18:15:09