14172 matches found
CVE-2024-57277: Improper Neutralization of Input During Web Page Generation
InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...
CVE-2024-57277
InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting XSS via SVG file upload...
LunaSVG security vulnerabilities
LunaSVG is a standalone SVG rendering library in C by the individual developer Samuel Ugochukwu. A security vulnerability exists in LunaSVG version v3.0.0, which stems from a discovery of a containment segmentation violation via the component plutovgblend...
K000149383: Qt vulnerabilities CVE-2023-32763
Security Advisory Description An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered. CVE-2023-32763 Impact There is no impact; F5 products are not...
WordPress WP All Import Pro plugin <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin WP All Import Pro versions = 4.9.7...
CVE-2024-8722
The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-8722 WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-8722 WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-8722
CVE-2024-8722 affects the WordPress plugin “Import any XML or CSV File to WordPress PRO” up to version 4.9.7. It is a Stored Cross-Site Scripting (XSS) vulnerability via SVG file uploads caused by insufficient input sanitization and output escaping. An authenticated attacker with Administrator-le...
CVE-2024-8722: Improper Neutralization of Input During Web Page Generation
The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2025-3302 · Unknown +2 · Matrix Media Repo +4
Name of the Vulnerable Software and Affected Versions: Matrix Media Repo versions prior to 1.3.8 Description: The issue arises when SVG or JPEGXL thumbnailers are enabled, allowing a user to upload a file that claims to be one of these types and request a thumbnail, potentially invoking a differe...
CVE-2024-50807
Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting XSS via file upload using the svg and pdf extensions...
CVE-2024-50807: Improper Neutralization of Input During Web Page Generation
Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting XSS via file upload using the svg and pdf extensions...
CVE-2024-50807
Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting XSS via file upload using the svg and pdf extensions...
CVE-2024-50807
Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting XSS via file upload using the svg and pdf extensions...
CVE-2024-50807
Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting XSS via file upload using the svg and pdf extensions...
CVE-2024-50807
Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability is triggered specifically when uploading files with svg and pdf extensions, which may allow for the execution of malicious scripts...
CVE-2024-13287
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...
CVE-2024-13286
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SVG Embed allows Cross-Site Scripting XSS.This issue affects SVG Embed: from 0.0.0 before 2.1.2...
CVE-2024-13287 Views SVG Animation - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-051
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...