Beveiligingsadvies

CVE-2024-3111

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-27 06:00:03
Laatst bijgewerkt 2024-08-01 19:32:42
Toegewezen door WPScan
CVSS-score 7.1
Status PUBLISHED

Beschrijving

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues