Stored XSS vulnerability available due to insufficient SVG sanitization, it may be exploited if the uploaded SVG image is included in line in an HTML page.
This vulnerability affects the following application versions:
Stored cross-site scripting vulnerability available via svg file uploads due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the svg file. By default, this can only be exploited by administrators, but the ability to upload svg files can be extended to authors.
This vulnerability affects the following application versions:
Improved sanitization of SVG uploads and attachments enhances security by filtering out potentially harmful code while prevent vulnerabilities like XSS while ensuring safe handling of SVG files.
This vulnerability affects the following application versions:
The output in the admin settings page is not properly escaped and may lead to an XSS attack.
This vulnerability affects the following application versions:
Some parts are not doing enough checks to see if user can upload files to prevent incorrent permission and possible attacks
This vulnerability affects the following application versions:
Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.
Læs mere om os her: https://standoutmedia.dk/