CVE-2023-7086 — SVG Uploads Support <= 2.1.1 - Author+ Stored XSS via SVG

CVE-2023-7086

SVG Uploads Support <= 2.1.1 - Author+ Stored XSS via SVG PUBLISHED

Description (CNA)

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

Affected (CNA)

Vendor / product	Versions
Unknown / SVG Uploads Support	affected 0 through 2.1.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/94954e1a-dc09-4811-b57d-b12bf69a767d/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.