Staude

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Staude records in CISA KEV

No Staude vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mime Types Extended 1 record MEDIUM

Records

1 record

TI-2024-04432 CVE-2024-4759 · GHSA-rxxp-gpv7-w3c9

Mime Types Extended <= 0.11 - Author+ Stored XSS via SVG Upload

MEDIUM 58

The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0035 Published 2024-06-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0