Threats tagged 'ghsa-qgw2-v7vq-9g5r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.4%	CVE-2026-16559YMC Filter (WordPress plugin) · Cross-Site Scripting (XSS) Medium6.8EPSS 0.4%2026-08-08CVE Database V5CVE-2026-16559 The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site's origin when the file is viewed. EPSS 0.4%Vulnerability CWE-79 #ghsa-qgw2-v7vq-9g5r	CVE Database V5	2026-08-08

Page 1 of 1