WordPress security by component

SVG Complete

Plugin description

SVG Complete is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 01, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: svg-complete

Latest vulnerability

CVE-2024-9119: SVG Complete: Cross-site scripting

SVG Complete is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedOct 01, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 01, 2024	CVE-2024-9119 SVG Complete: Cross-site scripting SVG Complete is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending