Description
Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tripetto | Tripetto (WordPress plugin) | <= 5.1.4 – ≤ 5.1.4 | — |
Medium · 4.7
CVE-2021-36895
EUVD-2021-23471GHSA-f27m-q7gr-7676
WordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload
Published Apr 26, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack