2025-01-05 03:03:46 +00:00

25 lines
885 B
JSON

{
"id": "CVE-2024-11184",
"sourceIdentifier": "contact@wpscan.com",
"published": "2025-01-02T06:15:06.697",
"lastModified": "2025-01-02T06:15:06.697",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts"
},
{
"lang": "es",
"value": "El complemento de WordPress wp-enable-svg hasta la versi\u00f3n 0.7 no desinfecta los archivos SVG cuando se cargan, lo que permite que los autores y superiores carguen SVG que contengan scripts maliciosos."
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/fc982bcb-9974-481f-aef4-580ae9edc3c8/",
"source": "contact@wpscan.com"
}
]
}