Benbodhi Svg_support
4 CVEs affecting Benbodhi Svg_support. Latest disclosed: 2025-02-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10222 | Medium | 6.4 | 2025-02-21 | The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.5.10 due to insu… |
CVE-2022-4022 | Medium | 6.4 | 2022-11-16 | The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not sanitized. While… |
CVE-2022-1755 | Medium | 5.4 | 2022-09-26 | The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cros… |
CVE-2021-24686 | Medium | 4.8 | 2022-02-01 | The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high p… |