Today > | 1 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-4271

June 14, 2024, 6:15 a.m.

Product(s) Impacted

SVGator WordPress plugin

up to 1.2.6

Description

The SVGator WordPress plugin through 1.2.6 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.

Weaknesses

Date

Published: June 14, 2024, 6:15 a.m.

Last Modified: June 14, 2024, 6:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com