VULNERABILITY INTELLIGENCE

CVE-2023-7088

CVSS score5.4 MEDIUM

EPSS probability0.30%

CISA KEVNot currently listed

Published2025-05-15

Last modified2026-06-17

Description

The Add SVG Support for Media Uploader | inventivo WordPress plugin through 1.0.5 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.