Cross site request forgery (csrf)

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent mainly XSS, but depending...

CVE-2022-1091

The CVE-2022-1091 issue affects the Safe SVG WordPress plugin prior to version 1.9.10. The sanitisation step can be bypassed by spoofing the content-type in a POST request to upload an SVG file, allowing an attacker to perform XSS (and potentially other XML-related attacks depending on the SVG us...

CVE-2022-1091 Safe SVG < 1.9.10 - SVG Sanitisation Bypass

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent mainly XSS, but depending...

WordPress plugin sanitisation step of the Safe SVG 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Safe SVG plugin <= 1.9.9 - SVG Sanitization Bypass vulnerability

SVG Sanitization Bypass vulnerability discovered by David Hamann in WordPress Safe SVG plugin versions = 1.9.9. Solution Update the WordPress Safe SVG plugin to the latest available version at least 1.9.10...

Safe SVG < 1.9.10 - SVG Sanitisation Bypass

The sanitisation step of the plugin can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent mainly XSS, but depending on further use of uploaded SVG...

WordPress safe-svg denial of service vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. safe-svg is an SVG Scalable Vector Graphics upload plugin used in it. A denial of service vulnerability exists in WordPress safe-svg...

CVE-2019-18854

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring...

CVE-2019-18855

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...

CVE-2019-18854

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring...

CVE-2019-18855

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...

Denial of service

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...

Denial of service

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring...

CVE-2019-18854

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring...

CVE-2019-18854

The CVE-2019-18854 issue affects the WordPress Safe SVG plugin up to version 1.9.4. The root cause is an unlimited recursion triggered by a specific SVG fragment: , leading to Denial of Service. Multiple sources (WordPress ecosystem advisories and CVE aggregations) confirm the vulnerability exist...

CVE-2019-18855

The CVE-2019-18855 issue affects the WordPress Safe SVG plugin (safe-svg) up to version 1.9.4, with a Denial of Service vulnerability arising from handling of potentially unwanted elements or attributes in SVG uploads. Root cause is a DoS condition; affected installations are those running vulner...

CVE-2019-18855

A Denial Of Service vulnerability exists in the safe-svg aka Safe SVG plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes...

WordPress Safe SVG plugin <=1.9.5 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by 0xd0ff9 in WordPress Safe SVG plugin versions =1.9.5. Solution Update the WordPress Safe SVG plugin to the latest available version at least 1.9.6...

PT-2019-15703 · Safe-Svg · Safe-Svg

Name of the Vulnerable Software and Affected Versions: safe-svg plugin versions prior to 1.9.5 Description: A Denial Of Service issue exists, related to potentially unwanted elements or attributes. Recommendations: For versions prior to 1.9.5, update to version 1.9.5 or later to resolve the issue...

PT-2019-15702 · Safe-Svg · Safe-Svg

Name of the Vulnerable Software and Affected Versions: safe-svg plugin versions through 1.9.4 Description: A Denial Of Service issue exists, related to unlimited recursion for a '' substring. Recommendations: For versions through 1.9.4, update to a version later than 1.9.4 to resolve the issue...