Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 06:36:35 +0000 CVE-2023-7085 — Scalable Vector Graphics (SVG) <= 3.4 - Author+ Stored XSS via SVG https://vulnerability.circl.lu/vuln/cve-2023-7085 <p><strong>Affected:</strong> Unknown Scalable Vector Graphics (SVG), sterlinghamilton scalable_vector_graphics</p> <p>The Scalable Vector Graphics (SVG) WordPress plugin through 3.4 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.</p> <p><strong>Affected:</strong> Unknown Scalable Vector Graphics (SVG), sterlinghamilton scalable_vector_graphics</p> <p>The Scalable Vector Graphics (SVG) WordPress plugin through 3.4 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.</p> https://vulnerability.circl.lu/vuln/cve-2023-7085