CVE-2024-11184

The wp-enable-svg WordPress plugin (versions through 0.7 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to properly sanitize uploaded SVG files. An attacker with author-level access or higher can upload a specially crafted SVG file containing malicious scripts. When other u...