CVE-2023-7085
EUVD-2023-5926918.03.2024, 19:15
The Scalable Vector Graphics (SVG) WordPress plugin through 3.4 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sterlinghamilton | scalable_vector_graphics_\(svg\) | 𝑥 ≤ 3.4 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| sterlinghamilton | scalable_vector_graphics | 𝑥 ≤ 3.4 | ADP |