Vulnerabilities > Uploading SVG Webp AND ICO Files Project > Uploading SVG Webp AND ICO Files > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-04	CVE-2023-4460	Cross-site Scripting vulnerability in Uploading Svg, Webp and ICO Files Project Uploading Svg, Webp and ICO Files 1.0.1 The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. network low complexity uploading-svg-webp-and-ico-files-project CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.