CVE-2024-12163

GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload PUBLISHED

Description (CNA)

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads.

Vendor / product	Versions
Unknown / goodlayers-core	affected 0 before 2.1.3

No CWE identifiers supplied.

CISA-ADP

No English description supplied.