Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-1755

SVG Support < 2.5 - Author+ Stored Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown SVG Support

  • 2.5 to < 2.5affected

References