Cits Support Svg, Webp Media And Ttf,otf File Upload

cits_support_svg,_webp_media_and_ttf,otf_file_upload

Vendor: Ashik • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-5458

1Ashik

1Cits Support Svg, Webp Media And Ttf,otf File Upload

Jun 17, 2026

Oct 31, 2023

N/A· v4

5.4 MEDIUM· v3

N/A· v2

The CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin before 3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS pay...Show more