2024-03-18 21:03:27 +00:00

20 lines
651 B
JSON

{
"id": "CVE-2023-7085",
"sourceIdentifier": "contact@wpscan.com",
"published": "2024-03-18T19:15:06.160",
"lastModified": "2024-03-18T19:40:00.173",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "The Scalable Vector Graphics (SVG) WordPress plugin through 3.4 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads."
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/a2ec1308-75a0-49d0-9288-33c6d9ee4328/",
"source": "contact@wpscan.com"
}
]
}