Viable Url Media Uploader
Monthly
Stored cross-site scripting in the WordPress plugin Viable URL Media Uploader (all versions up to and including 1.0.0) lets an authenticated user holding Author-level capabilities or higher upload a crafted SVG file whose embedded script content is neither sanitized on upload nor escaped on output, so the payload executes whenever a visitor or administrator browses directly to the uploaded SVG's URL. The flaw carries a CVSS 3.1 base score of 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting a scope change into the browsing context plus low confidentiality and integrity impact; exploitation is gated by the Author+ prerequisite, so the attacker pool is limited to trusted or already-compromised accounts on sites running this niche plugin. No public exploit code and no confirmed active exploitation were identified at time of analysis, though the Wordfence disclosure and a linked Trac source reference make the vulnerable code path publicly visible.
Stored cross-site scripting in the WordPress plugin Viable URL Media Uploader (all versions up to and including 1.0.0) lets an authenticated user holding Author-level capabilities or higher upload a crafted SVG file whose embedded script content is neither sanitized on upload nor escaped on output, so the payload executes whenever a visitor or administrator browses directly to the uploaded SVG's URL. The flaw carries a CVSS 3.1 base score of 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting a scope change into the browsing context plus low confidentiality and integrity impact; exploitation is gated by the Author+ prerequisite, so the attacker pool is limited to trusted or already-compromised accounts on sites running this niche plugin. No public exploit code and no confirmed active exploitation were identified at time of analysis, though the Wordfence disclosure and a linked Trac source reference make the vulnerable code path publicly visible.