CVE-2022-1562

CVE-2022-1562 affects the WordPress Enable SVG plugin versions before 1.4.0. The vulnerability is a stored cross-site scripting (XSS) flaw caused by insufficient sanitisation of uploaded SVG files, allowing a malicious SVG to trigger JavaScript when accessed. Impact is described as medium severit...