Vulnerabilities > CVE-2022-1562 - Unspecified vulnerability in Room 34 Creative Services Enable SVG

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

room-34-creative-services

NVD

Published: 2022-05-30

Updated: 2024-11-21

Summary

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

Vulnerable Configurations

Part	Description	Count
Application	Room_34_Creative_Services Room 34 Creative Services Enable SVG 1.0.0 Room 34 Creative Services Enable SVG 1.1.0 Room 34 Creative Services Enable SVG 1.1.1 Room 34 Creative Services Enable SVG 1.2.0 Room 34 Creative Services Enable SVG 1.2.1 Room 34 Creative Services Enable SVG 1.3.0 Room 34 Creative Services Enable SVG 1.3.1	7

References

https://wpscan.com/vulnerability/8e5b1e4f-c132-42ee-b2d0-7306ab4ab615
https://wpscan.com/vulnerability/8e5b1e4f-c132-42ee-b2d0-7306ab4ab615