Easy Svg Support Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Easy Svg Support Project records in CISA KEV

No Easy Svg Support Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy Svg Support 1 record LOW

Records

1 record in Easy Svg Support · all components

TI-2022-01823 CVE-2022-1964 · GHSA-f6vc-649h-9c88

Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG

LOW 25

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2022-06-27 Fixed in 3.3.0 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0