← CVE Intelligence

CVE-2024-4759

Mime Types Extended <= 0.11 - Author+ Stored XSS via SVG Upload PUBLISHED

Description (CNA)

The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

Affected (CNA)

Vendor / productVersions
Unknown / Mime Types Extendedaffected 0 through 0.11

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.