CVE-2022-1562

MEDIO 5.4CVE-2022-1562 · Published 30/05/2022 · updated 17/06/2026

In breve

CVE-2022-1562 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda enable svg (room 34 creative services).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 49.2% delle vulnerabilità.
Correzione: aggiornare a 1.4.0 o successiva.

Package	Affected versions	Patched versions
enable svg room_34_creative_services	`< 1.4.0`	`1.4.0`

Description

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

References

wpscan.com/vulnerability/8e5b1e4f-c132-42ee-b2d0-7306ab4ab615 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free