Skip to content
Sign in
Not rated

CVE-2022-2299 The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a…

Description

The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

Affected products and versions

Product Affected versions Fixed in
Allow svg files 1.1 No fix stated

Other CVEs of Allow svg files

The 2 CVEs of Allow svg files →
CVE-2022-1939 The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high… Not rated
Track this CVE