Medium severity5.4NVD Advisory· Published Dec 4, 2023· Updated Jun 17, 2026
CVE-2023-4460
CVE-2023-4460
Description
The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Uploading SVG, WEBP and ICO filesdescription
- Range: <=1.2.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/82f8d425-449a-471f-94df-8439924fd628nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.