PT-2019-15703 · Safe-Svg · Safe-Svg

Published 2019-11-11 · Updated 2023-10-24 · CVE-2019-18855

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions safe-svg plugin versions prior to 1.9.5

Description A Denial Of Service issue exists, related to potentially unwanted elements or attributes.

Recommendations For versions prior to 1.9.5, update to version 1.9.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2019-18855

Affected Products

Safe-Svg

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-18855 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18855 · Vendor Advisory
• https://fortiguard.com/zeroday/FG-VD-19-113 · Note
• https://wordpress.org/plugins/safe-svg/#developers · Note
• https://plugins.trac.wordpress.org/changeset/2185438 · Note
• https://wpvulndb.com/vulnerabilities/9937 · Note