WordPress king_IE plugin <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin kingIE versions = 1.0...

WordPress king_IE Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software kingIE Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9125 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a205228c7192 Credits Francesco Carlucci Required privilege...