medium5.4
CVE-2024-3111
The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, lead…
Impact
The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| H5p | H5p | before 1.15.8 |