https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:28:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-11457 EUVD-2026-11457 https://cve.radiocsirt.org/vuln/euvd-2026-11457 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1091 <p>The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).</p> <p>The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1091 https://cve.radiocsirt.org/vuln/ghsa-5h7w-hmxc-99g5 <p><strong>Affected:</strong> Packagist: darylldoyle/safe-svg</p> <p>The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).</p> <p><strong>Affected:</strong> Packagist: darylldoyle/safe-svg</p> <p>The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).</p> https://cve.radiocsirt.org/vuln/ghsa-5h7w-hmxc-99g5 https://cve.radiocsirt.org/vuln/gsd-2022-1091 gsd-2022-1091 https://cve.radiocsirt.org/vuln/gsd-2022-1091