Threats tagged 'ghsa-7g95-j349-5gxv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-104676The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents High2026-11-10GCVE DatabaseCVE-2026-104676 The Zion Builder WordPress plugin versions through 3.6.17 allow authenticated users with Author role or higher to upload SVG files that are not sanitized or validated. These SVG files can contain malicious JavaScript, which executes in the browser of anyone who views the file, leading to potential cross-site scripting (XSS) attacks. Report on CVE-2026-104676 Vulnerability #ghsa-7g95-j349-5gxv	GCVE Database	2026-11-10

Page 1 of 1