| |
Vulnerability CVE-2023-7089
Published: 2024-01-29
| Description: |
The Easy SVG Allow WordPress plugin through 1.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. |
References: |
https://wpscan.com/vulnerability/3b8ba734-7764-4ab6-a7e2-8de55bd46bed/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
