Unrated severityNVD Advisory· Published Jul 10, 2023· Updated Aug 2, 2024
Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG
CVE-2023-2529
Description
The Enable SVG Uploads WordPress plugin through 2.1.5 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=2.1.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/4ac03907-2373-48f0-bca1-8f7073c06b18mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.