CVE-2024-11098

The SVG Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level acces...

WordPress SVG Block plugin < 1.1.20 - Author+ Stored XSS via SVG File Upload vulnerability

Author+ Stored XSS via SVG File Upload vulnerability discovered by Rayhan Ramdhany Hanaputra in WordPress Plugin SVG Block versions 1.1.20...