CVE-2021-24386

CVE-2021-24386 affects the WordPress WP SVG Images plugin prior to version 3.4. The vulnerability arises from insufficient sanitisation of uploaded SVG files, enabling low-privilege users (e.g., author+) to upload a malicious SVG and trigger stored XSS when other users access the file. Multiple c...

CVE-2024-5945

CVE-2024-5945 affects the WP SVG Images WordPress plugin, with stored XSS via the type parameter in all versions up to 4.2 due to insufficient input sanitization. Exploitation requires authentication (Author-level access or higher) and permissions to upload sanitized files. Successful abuse could...