Read the docs

Boldblocks

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Boldblocks records in CISA KEV

No Boldblocks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Svg Block 1 record MEDIUM

Records

1 record

TI-2024-03974 CVE-2024-4269 · GHSA-64h4-j9cq-c2v4

SVG Block < 1.1.20 - Author+ Stored XSS via SVG File Upload

Priority MEDIUM 60

The SVG Block WordPress plugin before 1.1.20 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00417 Published 2024-07-13 Fixed in 1.1.20 CWE-79
Open these records in search →