Vulnerabilities > CVE-2022-34648 - Unspecified vulnerability in Uploading Svg, Webp and ICO Files Project Uploading Svg, Webp and ICO Files 1.0.1

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
uploading-svg-webp-and-ico-files-project
NVD
Published: 2022-08-23
Updated: 2024-11-21

Summary

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress.

Vulnerable Configurations

Part Description Count
Application
Uploading_Svg\,_Webp_And_Ico_Files_Project
1

References