CVE-2024-4269

The SVG Block WordPress plugin (versions prior to 1.1.20 ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to sanitize SVG file contents. This flaw allows users with at least the author role to upload malicious SVG files containing JavaScript, enabling the execution of XSS att...