Unrated severityNVD Advisory· Published Jun 14, 2024· Updated Mar 24, 2025
SVGMagic <= 1.1 - Stored XSS via SVG Upload
CVE-2024-4270
Description
The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/SVGMagicdescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/7a3b89cc-7a81-448a-94fc-36a7033609d5/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.