CVE-2023-6541

The Allow SVG WordPress plugin, in versions prior to 1.2.0 , fails to properly sanitize uploaded SVG files. This vulnerability allows users with permissions as low as Author to upload malicious SVG files containing Cross-Site Scripting (XSS) payloads. To remediate this issue, users are recommende...