CVE-2024-9071

CVE-2024-9071 relates to the WordPress plugin “Easy Demo Importer – A Modern One-Click Demo Import Solution.” The vulnerability is a stored XSS via SVG file uploads in all versions up to 1.1.2, caused by insufficient input sanitization and output escaping. Exploitation requires authentication at ...