Beveiligingsadvies

CVE-2025-9978

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-24 06:00:09
Laatst bijgewerkt 2026-01-09 20:11:33
Toegewezen door WPScan
CVSS-score 6.8
Status PUBLISHED

Beschrijving

The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vulnerability.