Vulnerability — CVE-2023-7089

CVE-2023-7089

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-7089
Description:: The Easy SVG Allow WordPress plugin through 1.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
Last updated date:: 02/03/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 02/03/2024
Reference url to background: https://wpscan.com/vulnerability/3b8ba734-7764-4ab6-a7e2-8de55bd46bed/