CVE-2024-9125

CVE-2024-9125 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress king_IE plugin, version ≤ 1.0. The flaw arises from insufficient input sanitization and output escaping for SVG uploads, allowing authenticated attackers with Author-level access or higher to inject scripts...