Andibauer

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Andibauer records in CISA KEV

No Andibauer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Svgmagic 1 record MEDIUM

Records

1 record in Svgmagic · all components

TI-2024-03975 CVE-2024-4270 · GHSA-m4j9-whh9-8x9g

SVGMagic <= 1.1 - Stored XSS via SVG Upload

MEDIUM 58

The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00312 Published 2024-06-14 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0