3 matches found
GHSA-J77F-79W9-RGHC The wp-enable-svg WordPress plugin does not sanitize SVG files when uploaded
The wp-enable-svg WordPress plugin through 0.2 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts...
4.8CVSS5.5AI score0.00427EPSS
SaveExploits1References3
The wp-enable-svg WordPress plugin does not sanitize SVG files when uploaded
The wp-enable-svg WordPress plugin through 0.2 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts...
4.8CVSS6.8AI score0.00427EPSS
SaveExploits1References3Affected Software1
CVE-2024-11184: Undefined Security Weakness
The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts...
4.8CVSS5.8AI score0.00427EPSS
SaveExploits1References1
20