medium6.8
CVE-2025-9978
The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vul…
Impact
The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vulnerability.
Affected products
| Product | Affected versions |
|---|---|
| Jeg Kit For Elementor WordPress Plugin | before 2.7.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.