Vulnerability in SVG Shortcode plugin Allows Stored Cross-Site Scripting

CVE-2024-12574

What is CVE-2024-12574?

The SVG Shortcode plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability that arises from inadequate input sanitization and output escaping. This flaw allows unauthenticated attackers to upload SVG files containing malicious scripts. When users access these SVG files, the injected scripts execute, potentially compromising the security of the website and its users. It is crucial for WordPress site administrators to ensure they are using updated versions of the SVG Shortcode plugin and to apply necessary security measures to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References