Beveiligingsadvies

CVE-2026-16559

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-08 06:00:11

Laatst bijgewerkt 2026-08-11 19:34:57

Toegewezen door WPScan

CVSS-score 6.8

Status PUBLISHED

Beschrijving

The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site's origin when the file is viewed.

← Alle CVE's bekijken Bekijk op cve.org ↗