CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-10222 – SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
https://notcve.org/view.php?id=CVE-2024-10222
21 Feb 2025 — The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. By default, this can only be exploited by administrators, but the ability to upload SVG files can be extended to autho... • https://github.com/benbodhi/svg-support/commit/eee3e13b650511c9cc9ee0746be485d031c7c072 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-6708 – SVG Support <= 2.5.5 - Authenticated (Author+) Cross-Site Scripting via SVG
https://notcve.org/view.php?id=CVE-2023-6708
17 Jul 2024 — The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG upload feature in all versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping, even when the 'Sanitize SVG while uploading' feature is enabled. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note that successful exploitation of this vu... • https://plugins.trac.wordpress.org/browser/svg-support/trunk/functions/attachment.php#L235 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-4022 – SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2022-4022
16 Nov 2022 — The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not sanitized. While version 2.5 adds the ability to sanitize image as they are uploaded, the plugin defaults to disable sanitization and does not restrict SVG upload to only administrators. This allows authenticated attackers, with author-level privileges and higher, to upload malicious SVG files that can be embedded in posts and pages by higher privileged users. Additi... • https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2776612%40svg-support%2Ftrunk&old=2672900%40svg-support%2Ftrunk&sfp_email=&sfph_mail= • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1CVE-2022-1755 – SVG Support < 2.5 - Author+ Stored Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2022-1755
05 Sep 2022 — The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks El plugin SVG Support de WordPress versiones anteriores a 2.5, no maneja apropiadamente los SVG añadidos por medio de una URL, lo que podría permitir a usuarios con un rol tan bajo como el de autor llevar a cabo ataques de tipo Cross-Site Scripting The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripti... • https://wpscan.com/vulnerability/62b2548e-6b59-48b8-b1c2-9bd47e634982 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-24686 – SVG Support < 2.3.20 - Admin+ Stored Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2021-24686
03 Jan 2022 — The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. El plugin SVG Support de WordPress versiones anteriores a 2.3.20, no escapa de la configuración "CSS Class to target" antes de mostrarla en un atributo, lo que podría permitir a usuarios con altos privilegios llevar a cabo ataques de tipo Cro... • https://plugins.trac.wordpress.org/changeset/2651929 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •