Easy Svg Support Security Vulnerabilities and Issues — Easy Svg Support CVE List

Lucene search

Easy Svg Support ProjectEasy Svg Support

2 matches found

CVE•added 2022/06/27 9:15 a.m.•78 views

CVE-2022-1964

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

5.4CVSS5.2AI score0.00171EPSS

CVE•added 2022/09/26 1:15 p.m.•53 views

CVE-2022-1755

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks

5.4CVSS5.3AI score0.00111EPSS