← Back

Ashik

ashik

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Cits Support Svg, Webp Media And Ttf,otf File Upload
cits_support_svg,_webp_media_and_ttf,otf_file_upload
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5458
1Ashik
1Cits Support Svg, Webp Media And Ttf,otf File Upload
Jun 17, 2026
Oct 31, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin before 3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS pay...Show more
The CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin before 3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.Show less