Threats tagged 'ghsa-r386-r8vg-hrxg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-121796The Add From Server Lite WordPress plugin before 6.0.0 does not restrict SVG uploads to users allowed to post High2026-11-07GCVE DatabaseCVE-2026-121796 The Add From Server Lite WordPress plugin versions prior to 6.0.0 allow users with the Author role and above to upload SVG files containing JavaScript. This occurs because the plugin does not restrict SVG uploads to users permitted to post unfiltered HTML, enabling stored cross-site scripting (XSS) attacks. Report on CVE-2026-121796 Vulnerability #ghsa-r386-r8vg-hrxg	GCVE Database	2026-11-07

Page 1 of 1