Description
Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 10up | Safe SVG | ≤ 2.5.0 | — |
Medium · 6.5
CVE-2026-94077
EUVD-2026-89832GHSA-754p-gr58-jx6v
WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack