CVE-2022-2299: Improper Neutralization of Input During Web Page Generation

The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

PT-2022-15759

Name of the Vulnerable Software and Affected Versions Allow SVG Files WordPress plugin versions 1.1 and earlier Description The issue concerns the Allow SVG Files WordPress plugin, which fails to sanitize uploaded SVG files. This could allow users with a role as low as Author to upload malicious...