CVE-2024-8378

The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wphandleupload, but not for example for code that uses wphandlesideload which is often used to upload attachments via raw POST data...

CVE-2024-8378

The Safe SVG WordPress plugin versions prior to 2.2.6 are vulnerable to an Author+ Cross-Site Scripting (XSS) vulnerability. The root cause is a sanitisation bypass where the cleanup code only executes for paths calling wp_handle_upload, failing to cover paths using wp_handle_sideload, which is c...

WordPress plugin Safe SVG 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-8378: Undefined Security Weakness

The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wphandleupload, but not for example for code that uses wphandlesideload which is often used to upload attachments via raw POST data...