https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:36:49.708795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-11847 CVE-2024-11847 — WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG 2026-10-10T19:36:49.724636+00:00

Affected: Unknown wp-svg-upload

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.