Advisories · Technology
Enable SVG, WebP, and ICO Upload.
Every CVE that names Enable SVG, WebP, and ICO Upload among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass
- Enable SVG, WebP, and ICO Upload
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass
- Enable SVG, WebP, and ICO Upload
- Cross-site scripting (XSS)