CVE-2024-10867

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-10867

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.9 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-10867 Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-10867 Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-10867

CVE-2024-10867 refers to the Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) via SVG file uploads in all versions up to and including 1.5.9, caused by insufficient input sanitization and out...

WordPress plugin Borderless 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-1612

Name of the Vulnerable Software and Affected Versions The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress versions up to, and including, 1.5.9 Description The issue is related to Stored Cross-Site Scripting via SVG File uploads due to...

WordPress Borderless plugin <= 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Borderless versions = 1.6.2...

CVE-2024-12163

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads...

CVE-2024-12163 GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads...

CVE-2024-12163

CVE-2024-12163 affects the WordPress plugin Goodlayers Core (Goodlayers Core) before version 2.1.3. The issue, as described in multiple sources, allows users with the Subscriber role and above to upload SVG files containing malicious payloads, enabling a stored Cross-Site Scripting (XSS) conditio...

CVE-2024-12163 GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads...

PT-2025-4852 · Unknown · Tandoor Recipes

Name of the Vulnerable Software and Affected Versions: Tandoor Recipes versions prior to 1.5.28 Description: The issue concerns the file upload feature in Tandoor Recipes, which allows uploading arbitrary files, including html and svg. These files can contain malicious content, such as XSS...

Tandoor Recipes 代码问题漏洞

Tandoor Recipes is a Tandoor Recipes open source application for managing recipes, planning meals, creating shopping lists and more. A code issue vulnerability exists in Tandoor Recipes versions prior to 1.5.28, which stems from a file upload feature that allows the upload of arbitrary files,...

CVE-2024-57277

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...

CVE-2024-57277

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...

CVE-2024-57277

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...

CVE-2024-57277

CVE-2024-57277 affects InnoShop v0.3.8 and earlier, with a Cross-Site Scripting (XSS) vulnerability via SVG file upload. The CVSS v3.1 base score is 5.7 (Medium) with attack vector Network, user interaction Required, privilege level Low, and confidentiality impact High. Root cause details are not...

CVE-2024-57277

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...

LunaSVG 安全漏洞

LunaSVG is a standalone SVG rendering library in C by the individual developer Samuel Ugochukwu. A security vulnerability exists in LunaSVG version v3.0.0, which stems from a discovery of a containment segmentation violation via the component plutovgblend...