The SVGMagic WordPress plugin... CVE-2024-4270

- AV AC AU C I A
发布： 2024-06-14
修订： 2025-03-24

The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息