CVE-2022-3137 TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload

The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user such as subscriber creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file...

Stored XSS via SVG File

Description flatpresshas a feature to upload file "uploader" and display from "media manager". By uploading SVG files, the users can perform Stored XSS attack. Copy the following code and save as filename.svg. Proof of Concept alertdocument.domain 1. login to...

Drawing a star with DOMMatrix

I recently recorded an episode of HTTP 203 on DOMPoint and DOMMatrix. If you'd rather watch the video version, here it is, but come back here for some bonus details on a silly mistake I made, which I almost got away with. DOMMatrix lets you apply transformations to DOMPoints. I find these APIs...

Drawing a star with DOMMatrix

I recently recorded an episode of HTTP 203 on DOMPoint and DOMMatrix. If you'd rather watch the video version, here it is, but come back here for some bonus details on a silly mistake I made, which I almost got away with. DOMMatrix lets you apply transformations to DOMPoints. I find these APIs...

Inventree vulnerable to Stored Cross-site Scripting

Inventree prior to 0.8.3 is vulnerable to stored cross-site scripting by uploading SVG files. Version 0.8.3 contains a patch for this issue...

GHSA-62G7-FPV9-V95F Inventree vulnerable to Stored Cross-site Scripting

Inventree prior to 0.8.3 is vulnerable to stored cross-site scripting by uploading SVG files. Version 0.8.3 contains a patch for this issue...

PT-2022-21787

Name of the Vulnerable Software and Affected Versions Inventree versions prior to 0.8.3 Description The issue is related to stored Cross-site Scripting XSS in the GitHub repository inventree/inventree. This occurs by uploading SVG files, allowing for the storage of malicious scripts that can be...

skia-ftz:api_svg_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=6497162267852800 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apisvgcanvas Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6260004558d0 Crash State: SkPath::Iter::next...

skia:api_svg_canvas: Heap-buffer-overflow in SkRect::setBoundsCheck

Detailed Report: https://oss-fuzz.com/testcase?key=5457813216559104 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apisvgcanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x607000017990 Crash State: SkRect::setBoundsCheck...

skia:api_svg_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=4820395777982464 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apisvgcanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60c0000009b8 Crash State: SkPath::Iter::next...

WordPress SVG Support Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

skia-ftz:api_svg_canvas: Use-of-uninitialized-value in SkRect::setBoundsCheck

Detailed Report: https://oss-fuzz.com/testcase?key=5542248683274240 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apisvgcanvas Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkRect::setBoundsCheck SkPath::isFinite...

CVE-2022-1755

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

Cross site scripting

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

CVE-2022-1755 SVG Support < 2.5 - Author+ Stored Cross-Site Scripting

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

CVE-2022-1755 SVG Support < 2.5 - Author+ Stored Cross-Site Scripting

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

CVE-2022-1755

The CVE-2022-1755 issue affects the WordPress SVG Support plugin prior to version 2.5. The vulnerability arises from improper handling of SVGs added via a URL, enabling Cross-Site Scripting (XSS). The CVSS data indicates a MEDIUM severity (5.4) with network attack vector, low attack complexity, a...

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability (CNVD-2022-73690)

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format. Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw when calling the fop function. An attacker could exploit the...

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format.Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw in the DefaultScriptSecurity function. An attacker could exploi...

CVE-2022-1755: Improper Neutralization of Input During Web Page Generation

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...