p PatchFirst

PatchFirst · Latest vulnerabilities

digimix/wp-svg-upload vulnerabilities

Vulnerabilities published for digimix/wp-svg-upload in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2024-11847

    Medium · CVSS 4.8EPSS 0.27%No fix published

    WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG

    The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.

    digimix/wp-svg-uploadPHP
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →