CVE-2024-4759 Mime Types Extended <= 0.11 - Author+ Stored XSS via SVG Upload

The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

CVE-2024-4759 Mime Types Extended <= 0.11 - Author+ Stored XSS via SVG Upload

The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

CVE-2024-4759

CVE-2024-4759 affects the Mime Types Extended WordPress plugin (versions up to 0.11). The issue is that SVG uploads are not sanitised, enabling a stored XSS payload via SVG files by users with as little as Author privileges. Public sources in the connected documents corroborate an Author+ XSS ris...

WordPress Mime Types Extended Plugin <= 0.11 is vulnerable to Cross Site Scripting (XSS)

Software Mime Types Extended Type Plugin Vulnerable versions = 0.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4759 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 87b2707f84e3 Credits Bob Matyas Required...