Stored Cross-Site Scripting in Starter Templates SVG Upload

Starter Templates through 4.2.1 registers an upload_mimes filter that permits SVG uploads, but never sanitizes the uploaded SVG contents. An authenticated attacker with contributor-level access or above could upload an SVG carrying arbitrary script, which then executes for any user who opens the file. The fix sanitizes SVG uploads on the wp_check_filetype_and_ext path, stripping disallowed tags, attributes and script-bearing attribute values.

This vulnerability affects the following application versions:

• Starter Templates – AI-Powered Templates 2.5.0
• Starter Templates – AI-Powered Templates 2.5.1
• Starter Templates – AI-Powered Templates 2.6.0
• Starter Templates – AI-Powered Templates 2.6.1
• Starter Templates – AI-Powered Templates 2.6.2
• Starter Templates – AI-Powered Templates 2.6.3
• Starter Templates – AI-Powered Templates 2.6.4
• Starter Templates – AI-Powered Templates 2.6.5
• Starter Templates – AI-Powered Templates 2.6.6
• Starter Templates – AI-Powered Templates 2.6.7
• Starter Templates – AI-Powered Templates 2.6.8
• Starter Templates – AI-Powered Templates 2.6.9
• Starter Templates – AI-Powered Templates 2.6.10
• Starter Templates – AI-Powered Templates 2.6.11
• Starter Templates – AI-Powered Templates 2.6.12
• Starter Templates – AI-Powered Templates 2.6.13
• Starter Templates – AI-Powered Templates 2.6.14
• Starter Templates – AI-Powered Templates 2.6.15
• Starter Templates – AI-Powered Templates 2.6.16
• Starter Templates – AI-Powered Templates 2.6.17
• Starter Templates – AI-Powered Templates 2.6.18
• Starter Templates – AI-Powered Templates 2.6.19
• Starter Templates – AI-Powered Templates 2.6.20
• Starter Templates – AI-Powered Templates 2.6.21
• Starter Templates – AI-Powered Templates 2.6.22
• Starter Templates – AI-Powered Templates 2.7.0
• Starter Templates – AI-Powered Templates 2.7.1
• Starter Templates – AI-Powered Templates 2.7.2
• Starter Templates – AI-Powered Templates 2.7.3
• Starter Templates – AI-Powered Templates 2.7.4
• Starter Templates – AI-Powered Templates 2.7.5
• Starter Templates – AI-Powered Templates 3.0.0
• Starter Templates – AI-Powered Templates 3.0.1
• Starter Templates – AI-Powered Templates 3.0.2
• Starter Templates – AI-Powered Templates 3.0.3
• Starter Templates – AI-Powered Templates 3.0.4
• Starter Templates – AI-Powered Templates 3.0.5
• Starter Templates – AI-Powered Templates 3.0.6
• Starter Templates – AI-Powered Templates 3.0.7
• Starter Templates – AI-Powered Templates 3.0.8
• Starter Templates – AI-Powered Templates 3.0.9
• Starter Templates – AI-Powered Templates 3.0.10
• Starter Templates – AI-Powered Templates 3.0.11
• Starter Templates – AI-Powered Templates 3.0.12
• Starter Templates – AI-Powered Templates 3.0.13
• Starter Templates – AI-Powered Templates 3.0.14
• Starter Templates – AI-Powered Templates 3.0.15
• Starter Templates – AI-Powered Templates 3.0.16
• Starter Templates – AI-Powered Templates 3.0.17
• Starter Templates – AI-Powered Templates 3.0.18
• Starter Templates – AI-Powered Templates 3.0.19
• Starter Templates – AI-Powered Templates 3.0.20
• Starter Templates – AI-Powered Templates 3.0.21
• Starter Templates – AI-Powered Templates 3.0.22
• Starter Templates – AI-Powered Templates 3.0.23
• Starter Templates – AI-Powered Templates 3.0.24
• Starter Templates – AI-Powered Templates 3.0.25
• Starter Templates – AI-Powered Templates 3.1.0
• Starter Templates – AI-Powered Templates 3.1.1
• Starter Templates – AI-Powered Templates 3.1.2
• Starter Templates – AI-Powered Templates 3.1.3
• Starter Templates – AI-Powered Templates 3.1.4
• Starter Templates – AI-Powered Templates 3.1.5
• Starter Templates – AI-Powered Templates 3.1.6
• Starter Templates – AI-Powered Templates 3.1.7
• Starter Templates – AI-Powered Templates 3.1.8
• Starter Templates – AI-Powered Templates 3.1.9
• Starter Templates – AI-Powered Templates 3.1.10
• Starter Templates – AI-Powered Templates 3.1.11
• Starter Templates – AI-Powered Templates 3.1.12
• Starter Templates – AI-Powered Templates 3.1.13
• Starter Templates – AI-Powered Templates 3.1.14
• Starter Templates – AI-Powered Templates 3.1.15
• Starter Templates – AI-Powered Templates 3.1.16
• Starter Templates – AI-Powered Templates 3.1.17
• Starter Templates – AI-Powered Templates 3.1.18
• Starter Templates – AI-Powered Templates 3.1.19
• Starter Templates – AI-Powered Templates 3.1.20
• Starter Templates – AI-Powered Templates 3.1.21
• Starter Templates – AI-Powered Templates 3.1.22
• Starter Templates – AI-Powered Templates 3.1.23
• Starter Templates – AI-Powered Templates 3.1.24
• Starter Templates – AI-Powered Templates 3.1.25
• Starter Templates – AI-Powered Templates 3.1.26
• Starter Templates – AI-Powered Templates 3.1.27
• Starter Templates – AI-Powered Templates 3.2.0
• Starter Templates – AI-Powered Templates 3.2.1
• Starter Templates – AI-Powered Templates 3.2.2
• Starter Templates – AI-Powered Templates 3.2.3
• Starter Templates – AI-Powered Templates 3.2.4
• Starter Templates – AI-Powered Templates 3.2.5
• Starter Templates – AI-Powered Templates 3.2.6
• Starter Templates – AI-Powered Templates 3.3.0
• Starter Templates – AI-Powered Templates 3.4.0
• Starter Templates – AI-Powered Templates 3.4.1
• Starter Templates – AI-Powered Templates 3.4.2
• Starter Templates – AI-Powered Templates 3.4.3
• Starter Templates – AI-Powered Templates 3.4.4
• Starter Templates – AI-Powered Templates 3.4.5
• Starter Templates – AI-Powered Templates 3.4.6
• Starter Templates – AI-Powered Templates 3.5.0
• Starter Templates – AI-Powered Templates 3.5.1
• Starter Templates – AI-Powered Templates 3.5.2
• Starter Templates – AI-Powered Templates 3.5.3
• Starter Templates – AI-Powered Templates 3.5.4
• Starter Templates – AI-Powered Templates 3.5.5
• Starter Templates – AI-Powered Templates 3.5.6
• Starter Templates – AI-Powered Templates 3.5.7
• Starter Templates – AI-Powered Templates 4.0.0
• Starter Templates – AI-Powered Templates 4.0.1
• Starter Templates – AI-Powered Templates 4.0.2
• Starter Templates – AI-Powered Templates 4.0.3
• Starter Templates – AI-Powered Templates 4.0.4
• Starter Templates – AI-Powered Templates 4.0.5
• Starter Templates – AI-Powered Templates 4.0.6
• Starter Templates – AI-Powered Templates 4.0.7
• Starter Templates – AI-Powered Templates 4.0.8
• Starter Templates – AI-Powered Templates 4.0.9
• Starter Templates – AI-Powered Templates 4.0.10
• Starter Templates – AI-Powered Templates 4.0.11
• Starter Templates – AI-Powered Templates 4.0.12
• Starter Templates – AI-Powered Templates 4.0.13
• Starter Templates – AI-Powered Templates 4.1.0
• Starter Templates – AI-Powered Templates 4.1.1
• Starter Templates – AI-Powered Templates 4.1.2
• Starter Templates – AI-Powered Templates 4.1.3
• Starter Templates – AI-Powered Templates 4.1.4
• Starter Templates – AI-Powered Templates 4.1.5
• Starter Templates – AI-Powered Templates 4.1.6
• Starter Templates – AI-Powered Templates 4.1.7
• Starter Templates – AI-Powered Templates 4.2.0
• Starter Templates – AI-Powered Templates 4.2.1