https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:56:29.891466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1091 CVE-2022-1091 — Safe SVG < 1.9.10 - SVG Sanitisation Bypass 2026-10-10T14:56:29.892709+00:00

Affected: Unknown Safe SVG

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).