5.4
Medium
CVE-2023-7086 The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users…
Description
The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SVG Uploads Support 2.1 | earliest → 2.1.1 | No fix stated |