Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:56:16 +0000 CVE-2022-1091 — Safe SVG < 1.9.10 - SVG Sanitisation Bypass https://cve.radiocsirt.org/vuln/cve-2022-1091 <p><strong>Affected:</strong> Unknown Safe SVG</p> <p>The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).</p> <p><strong>Affected:</strong> Unknown Safe SVG</p> <p>The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).</p> https://cve.radiocsirt.org/vuln/cve-2022-1091