Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/03/28 6:32 a.m.21 views

CVE-2024-11847

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

4.8CVSS5.8AI score0.00247EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/26 6:15 a.m.8 views

CVE-2024-11847

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

4.8CVSS5.8AI score0.00247EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/03/26 6:0 a.m.9 views

CVE-2024-11847 WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

5.9AI score0.00247EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.5 views

WordPress plugin wp-svg-upload 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS8AI score0.00247EPSS
SaveExploits1References1
Rows per page
Query Builder