Stored Cross-Site Scripting (CSS) Vulnerability in Inline SVG Plugin

CVE-2024-9064

What is CVE-2024-9064?

The Elementor Inline SVG plugin for WordPress contains a vulnerability that allows authenticated users with adequate permissions to perform Stored Cross-Site Scripting (XSS). This issue arises from inadequate input sanitization and output escaping for SVG file uploads. As a result, attackers can inject arbitrary script content into web pages, which executes in the context of users accessing those SVG files. All versions of the plugin up to and including 1.2.0 are impacted, presenting a significant risk to website integrity and user safety.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References