Lucene search
+L

4 matches found

wpexploit
wpexploit
•added 2022/03/25 12:00 a.m.•134 views

Safe SVG < 1.9.10 - SVG Sanitisation Bypass

The sanitisation step of the plugin can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent mainly XSS, but depending on further use of uploaded SVG...

6.1CVSS0.2AI score0.01201EPSS
SaveExploits2References1
Rows per page
Query Builder