Wphelpline ≫ Allow Svg

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

6.1

CVE-2023-6541

Exploit

EPSS 0.14%
Published 15.05.2025 20:15:29
Last modified 11.06.2025 19:22:02

The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.