cve/2023/CVE-2023-2143.md

### [CVE-2023-2143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2143)
![](https://img.shields.io/static/v1?label=Product&message=Enable%20SVG%2C%20WebP%20%26%20ICO%20Upload&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20(XSS)&color=brighgreen)

### Description

The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.

### POC

#### Reference
- https://wpscan.com/vulnerability/91898762-aa7d-4fbc-a016-3de48901e5de

#### Github
No PoCs found on GitHub currently.