Room 34 Creative Services, LLC

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Room 34 Creative Services, LLC records in CISA KEV

No Room 34 Creative Services, LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enable Svg 1 record LOW

Records

1 record in Enable Svg · all components

TI-2022-01433 CVE-2022-1562 · GHSA-x799-g23g-gg7p

Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG

LOW 25

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2022-05-30 Fixed in 1.4.0 CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0