Descripción
The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site-s origin when the file is viewed.
CVSS 6.8EPSS 0.152%Riesgo 0.69
Ver fuente- Publicación
- 2026-08-08 07:17:10
- Última modificación
- 2026-08-11 20:17:28
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H