CVE-2024-11184 — WP Enabled SVG <= 0.7 - Author+ Stored XSS via SVG
The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts
Published: 2025-01-02 · CVSS: 4.8 · CVSS 3.1
The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7