Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jvj-8r9f-f6pm

Опубликовано: 22 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

EPSS

Процентиль: 39%
0.00174
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 1 года назад

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

EPSS

Процентиль: 39%
0.00174
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79