Vendors / Uploading Svg, Webp And Ico Files Project Uploading Svg, Webp And Ico Files Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Uploading Svg, Webp And Ico Files Project records in CISA KEV No Uploading Svg, Webp And Ico Files Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01045 · Published 2023-12-04 · No fix listed CWE-79
Priority LOW 36
Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01209 · Published 2022-08-23 · No fix listed CWE-434
Priority LOW 25
Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00572 · Published 2022-08-23 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
