WordPress Aqua SVG Sprite plugin <= 3.0.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Aqua SVG Sprite versions = 3.0.14...