Threats tagged 'ghsa-898g-xh4c-5hhj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110504The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content High2026-10-29GCVE DatabaseCVE-2026-110504 The Enable SVG, WebP, and ICO Upload WordPress plugin versions before 1.1.6 improperly handle uploaded SVG files that are not detected as SVG content. These files are stored and served as SVG images without proper sanitization, which could allow users with author-level permissions or higher to execute stored cross-site scripting (XSS) attacks. Report on CVE-2026-110504 Vulnerability #ghsa-898g-xh4c-5hhj	GCVE Database	2026-10-29

Page 1 of 1