Vulnerabilities > CVE-2022-1964 - Unspecified vulnerability in Easy SVG Support Project Easy SVG Support
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |