← CVE Intelligence

CVE-2022-1939

Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload PUBLISHED

Description (CNA)

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to

Affected (CNA)

Vendor / productVersions
Unknown / Allow svg filesaffected 1.1 before 1.1

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.