EUVD-2021-11298

Malware in sbrugna...

CVE-2022-42450

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications...

CVE-2022-42450 HCL Domino Volt is affected by Cross-site scripting (XSS)

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications...

CVE-2022-42450 HCL Domino Volt is affected by Cross-site scripting (XSS)

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications...

CVE-2022-42450

CVE-2022-42450 concerns HCL Domino Volt. The issue is improper sanitization of SVG files in deployed Domino Volt applications, enabling client-side script injection (XSS) via SVG content. Documents specify CVSS base scores (NVD: 5.4/ MEDIUM; with UI:R, S:C, etc.; user interaction required) but do...

CVE-2022-44759 HCL Leap is affected by Cross-site scripting (XSS)

Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications...

CVE-2024-11847

The wp-svg-upload WordPress plugin, affecting versions through 1.0.0 , is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is a failure to properly sanitize SVG file contents during the upload process. This allows users with at least the author role to upload specially crafted SVG...

PT-2024-30114 · WordPress · Support Svg Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Support SVG WordPress plugin versions prior to 1.1.0 Description: The issue allows users with at least the author role to upload SVG files containing malicious JavaScript, leading to Stored XSS attacks. This is due to the lack of...