Aller au contenu
Se connecter
4.8 Moyenne

CVE-2024-8378 The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call…

Description

The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often used to upload attachments via raw POST data.

Produits et versions touchés

Produit Versions touchées Corrigé en
Safe SVG 2.2 premières → < 2.2.6 2.2.6
safe_svg 2.2 premières → < 2.2.6 2.2.6

Autres CVE de Safe SVG

Les 2 CVE de Safe SVG →
CVE-2022-1091 The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the… Non notée
Suivre cette CVE