Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:08:25 +0000 CVE-2024-3633 — WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG https://cve.radiocsirt.org/vuln/cve-2024-3633 <p><strong>Affected:</strong> Unknown WebP &amp; SVG Support, webp_and_svg_support</p> <p>The WebP &amp; SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.</p> <p><strong>Affected:</strong> Unknown WebP &amp; SVG Support, webp_and_svg_support</p> <p>The WebP &amp; SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.</p> https://cve.radiocsirt.org/vuln/cve-2024-3633