Логотип exploitDog
bind:CVE-2023-7086
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-7086

Количество 2

Количество 2

nvd логотип

CVE-2023-7086

9 месяцев назад

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-vxgw-vvr8-p42m

9 месяцев назад

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-7086

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS3: 5.4
0%
Низкий
9 месяцев назад
github логотип
GHSA-vxgw-vvr8-p42m

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS3: 5.4
0%
Низкий
9 месяцев назад

Уязвимостей на страницу