Lucene search
WPScanVULNRICHMENT:CVE-2023-4460HistoryDec 04, 2023 - 9:28 p.m.
CVE-2023-4460 Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG
2023-12-0421:28:50
WPScan
github.com
The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
Related
prion
prion
Design/Logic Flaw
2023-12-04 22:15:00
cvelist
cvelist
cve
cve
CVE-2023-4460
2023-12-04 22:15:07
wpvulndb
wpvulndb
Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG
2023-11-13 00:00:00
wpexploit
wpexploit
Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG
2023-11-13 00:00:00
nvd
nvd
CVE-2023-4460
2023-12-04 22:15:07
AI Score
6
Confidence
High
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-4460