medium4.7
CVE-2021-36895
Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.
Impact
Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tripetto | Tripetto | through 5.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/tripetto/wordpress-tripetto-plugin-5-1-4-unauthenticated-cross-site-scripting-xss-vulnerability-via-svg-image-upload
- https://wordpress.org/plugins/tripetto/#developers
- https://patchstack.com/database/vulnerability/tripetto/wordpress-tripetto-plugin-5-1-4-unauthenticated-cross-site-scripting-xss-vulnerability-via-svg-image-upload
- https://wordpress.org/plugins/tripetto/#developers