CVE-2024-11184

The wp-enable-svg WordPress plugin (versions 0.7 and earlier ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to insufficient sanitization of uploaded SVG files. This allows users with author-level privileges or higher to upload SVGs containing malicious scripts. As of the provided...