Threats tagged 'ghsa-c8jg-ch76-q9xw'

The Enable Media Replace WordPress plugin versions before 4.2.3 have a vulnerability where replaced media files bypass the WordPress upload pipeline. This omission prevents the SVG sanitizer prefilter from running, allowing authenticated users with upload permissions to upload SVG files containing executable scripts. These scripts execute when the SVG file is opened directly. The vulnerability requires that an SVG-enabling version of the plugin before 4.2.3 is active, as otherwise SVG uploads are rejected.