5.4
Moyenne
CVE-2023-7086 The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users…
Description
The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SVG Uploads Support 2.1 | premières → 2.1.1 | Pas de correctif indiqué |