Svg Support
Monthly
Stored XSS in the SVG Support WordPress plugin (before 2.5.17) is achieved by uploading a script-bearing .svgz file, bypassing the plugin's sanitization logic that applies only to .svg uploads despite both extensions being registered and served as SVG content. Any WordPress user role granted SVG upload access - such as an Author - can plant the payload, which then executes in the browser of any subsequent visitor, including administrators, enabling session hijacking or privileged action injection. A public proof-of-concept exists via WPScan; EPSS is low (0.16%, 6th percentile) and SSVC rates exploitation as non-automatable, but the stored nature of the payload and admin-reachability elevate practical impact.
The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.5.10 due to insufficient input sanitization and output. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Stored XSS in the SVG Support WordPress plugin (before 2.5.17) is achieved by uploading a script-bearing .svgz file, bypassing the plugin's sanitization logic that applies only to .svg uploads despite both extensions being registered and served as SVG content. Any WordPress user role granted SVG upload access - such as an Author - can plant the payload, which then executes in the browser of any subsequent visitor, including administrators, enabling session hijacking or privileged action injection. A public proof-of-concept exists via WPScan; EPSS is low (0.16%, 6th percentile) and SSVC rates exploitation as non-automatable, but the stored nature of the payload and admin-reachability elevate practical impact.
The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.5.10 due to insufficient input sanitization and output. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.