GHSA-j77f-79w9-rghc
The wp-enable-svg WordPress plugin does not sanitize SVG files when uploaded
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | mwdelaney/wp-enable-svg | <= 0.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
The wp-enable-svg WordPress plugin through 0.2 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts
References
External links from the advisory. They lead to third-party sites.