CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2022/07/25 1:15 p.m.•4 views

CVE-2022-2299

The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.4CVSS5.8AI score0.00585EPSS

SaveExploits1References1

Cvelist•added 2022/07/25 12:48 p.m.•26 views

CVE-2022-2299 Allow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVG

The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.5AI score0.00585EPSS

SaveExploits1References1

CVE•added 2022/07/25 12:48 p.m.•66 views

CVE-2022-2299

The CVE-2022-2299 entry concerns the WordPress plugin Allow SVG Files (

5.4CVSS5.3AI score0.00585EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by