Threats tagged 'ghsa-cghp-w6p2-hcf7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2026-110505The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG Medium6.82026-10-29GCVE DatabaseCVE-2026-110505 The Enable SVG, WebP, and ICO Upload WordPress plugin versions before 1.1.6 allow animation elements in uploaded SVG files to modify link targets to javascript: URIs. This flaw enables users with author-level permissions or higher to bypass SVG sanitization and conduct stored cross-site scripting (XSS) attacks that execute in WebKit-based browsers like Safari. Report on CVE-2026-110505 Vulnerability #ghsa-cghp-w6p2-hcf7	GCVE Database	2026-10-29

Page 1 of 1