Unscored CVE-2023-2143 EUVD-2023-33661GHSA-qx59-vmgp-6rg3

Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS

Published Jul 17, 2023 · Updated Oct 30, 2024 · Assigned by WPScan

Description

The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.

Affected products

Vendor	Product	Affected	Fixed
—	Enable SVG, WebP & ICO Upload	≤ 1.0.3	—

References

https://wpscan.com/vulnerability/91898762-aa7d-4fbc-a016-3de48901e5de exploit vdb-entry technical-description