Lucene search
PRIOn knowledge basePRION:CVE-2023-4460HistoryDec 04, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-12-0422:15:00
PRIOn knowledge base
www.prio-n.com
8
wordpress
plugin
xss
svg
webp
ico
security flaw
The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uploading_svg\\,_webp_and_ico_files | le | 1.2.1 |
Related
wpexploit
wpexploit
Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG
2023-11-13 00:00:00
wpvulndb
wpvulndb
Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG
2023-11-13 00:00:00
nvd
nvd
CVE-2023-4460
2023-12-04 22:15:07
cvelist
cvelist
cve
cve
CVE-2023-4460
2023-12-04 22:15:07