Safe SVG < 1.9.10 - SVG Sanitisation Bypass. Plugin allows content-type spoofing in POST request, leading to XSS attacks
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
wpexploit | Safe SVG < 1.9.10 - SVG Sanitisation Bypass | 25 Mar 202200:00 | – | wpexploit |
Prion | Cross site request forgery (csrf) | 18 Apr 202218:15 | – | prion |
Github Security Blog | Cross site scripting in safe-svg | 19 Apr 202200:00 | – | github |
Cvelist | CVE-2022-1091 Safe SVG < 1.9.10 - SVG Sanitisation Bypass | 18 Apr 202217:10 | – | cvelist |
NVD | CVE-2022-1091 | 18 Apr 202218:15 | – | nvd |
OSV | Cross site scripting in safe-svg | 19 Apr 202200:00 | – | osv |
OSV | CVE-2022-1091 | 18 Apr 202218:15 | – | osv |
OpenVAS | WordPress Safe SVG Plugin < 1.9.10 Contet-Type Bypass Vulnerability | 18 Sep 202300:00 | – | openvas |
CVE | CVE-2022-1091 | 18 Apr 202218:15 | – | cve |
Source | Link |
---|---|
github | www.github.com/10up/safe-svg/pull/28 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo