7.1
Élevée
CVE-2024-3111 The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and…
Description
The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Interactive Content 1.15 | premières → < 1.15.8 | 1.15.8 |
| H5P 1.15 | premières → < 1.15.8 | 1.15.8 |