7.1
High
CVE-2024-3111 The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and…
Description
The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Interactive Content 1.15 | earliest → < 1.15.8 | 1.15.8 |
| H5P 1.15 | earliest → < 1.15.8 | 1.15.8 |