Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbBob MatyasWPVDB-ID:47D15F1C-B9CA-494D-BE8F-63C30E92F9B8
HistoryOct 09, 2023 - 12:00 a.m.

CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG

2023-10-0900:00:00
Bob Matyas
wpscan.com
8
cits support
webp media
ttf file
otf file
file upload
author
stored xss
svg

EPSS

0

Percentile

14.0%

JSON

Description The plugin does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

PoC

As an author, upload an SVG with the payload: View the SVG and see the XSS.

Related

prion 1
cve 1
nvd 1
cvelist 1
wpexploit 1
wordfence 1
prion
prion
Unrestricted file upload
2023-10-31 14:15:00
cve
cve
CVE-2023-5458
2023-10-31 14:15:12
nvd
nvd
CVE-2023-5458
2023-10-31 14:15:12
cvelist
cvelist
CVE-2023-5458 CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG
2023-10-31 13:54:42
wpexploit
wpexploit
CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG
2023-10-09 00:00:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 9, 2023 to October 15, 2023)
2023-10-19 15:52:27

EPSS

0

Percentile

14.0%

JSON
Related for WPVDB-ID:47D15F1C-B9CA-494D-BE8F-63C30E92F9B8
prion1cve1nvd1cvelist1wpexploit1wordfence1