Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2022-1562

Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Room 34 Creative Services
Products
Enable Svg