Lucene search
+L

4 matches found

NVD
NVD
•added 2025/05/15 8:15 p.m.•20 views

CVE-2023-7086

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.4CVSS0.00305EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/05/15 8:09 p.m.•35 views

CVE-2023-7086 SVG Uploads Support <= 2.1.1 - Author+ Stored XSS via SVG

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

6.2AI score0.00305EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/05/15 8:09 p.m.•25 views

CVE-2023-7086 SVG Uploads Support <= 2.1.1 - Author+ Stored XSS via SVG

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

0.00305EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•5 views

CVE-2023-7086: Improper Neutralization of Input During Web Page Generation

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.4CVSS8.2AI score0.00305EPSS
SaveExploits2References1
Rows per page
Query Builder