← Back

Allow Svg

allow_svg

Vendor: Wphelpline • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-6541
1Wphelpline
1Allow Svg
Jun 17, 2026
May 15, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.