Vulnerability — CVE-2024-4270

CVE-2024-4270

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-4270
Description:: The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.
Last updated date:: 07/29/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/29/2024
Reference url to background: https://wpscan.com/vulnerability/7a3b89cc-7a81-448a-94fc-36a7033609d5/