Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-9238 1 Grandplugins 1 Avif Uploader 2025-06-12 5.4 Medium
The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.