Beveiligingsadvies

CVE-2025-9487

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-22 06:00:14

Laatst bijgewerkt 2025-09-22 16:10:43

Toegewezen door WPScan

CVSS-score 4.7

Status PUBLISHED

Beschrijving

The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow users to upload a malicious SVG containing XSS payloads

← Alle CVE's bekijken Bekijk op cve.org ↗