CVE-2022-34648
Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Modified - audit@patchstack.com
- Published
- 2022-08-23
- Last modified
- 2026-04-28
- Weaknesses
- CWE-79
Affected products
- Uploading Svg (Dmitrylitvinov)
- Webp And Ico Files Wordpress Plugin (Dmitrylitvinov)
- Uploading Svg, Webp And Ico Files (Uploading Svg, Webp And Ico Files Project)
References
- https://patchstack.com/database/vulnerability/uploading-svgwebp-and-ico-files/wordpress-uploading-svg-webp-and-ico-file…
- https://wordpress.org/plugins/uploading-svgwebp-and-ico-files/#developers
