4.7
Medium
CVE-2021-36895 Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto…
Description
Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tripetto (WordPress plugin) 5.1 | earliest → 5.1.4 | No fix stated |