Skip to content
OpenAdvisories

Package · Packagist

darylldoyle/safe-svg

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-1091

    Safe SVG < 1.9.10 - SVG Sanitisation Bypass

    The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin sh…

    darylldoyle/safe-svg Web / CMS Packagist