CVE-2024-4269
July 13, 2024, 6:15 a.m.
Tags
Product(s) Impacted
SVG Block WordPress plugin
- before 1.1.20
Description
The SVG Block WordPress plugin before 1.1.20 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.
Weaknesses
Date
Published: July 13, 2024, 6:15 a.m.
Last Modified: July 13, 2024, 6:15 a.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
contact@wpscan.com
References
contact@wpscan.com