TI-2024-10790 CVE-2024-11644 · GHSA-m7mh-v3gj-99xrWP-SVG <= 0.9 - Contributor+ Stored XSS via ShortcodePriority MEDIUM 60The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor…CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00354 · Published 2024-12-27 · No fix listed CWE-79
