PT-2022-25291 · WordPress · Svg Support

Marco Wotschka · Published 2022-11-16 · Updated 2022-11-18 · CVE-2022-4022

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SVG Support plugin for WordPress versions 2.5 through 2.5.1

Description The SVG Support plugin for WordPress defaults to insecure settings, allowing authenticated attackers with author-level privileges and higher to upload malicious SVG files. These files can contain malicious JavaScript and are not sanitized by the plugin. The embedded JavaScript can be triggered when visiting the image URL, enabling an attacker to execute malicious code in browsers visiting that URL.

Recommendations For version 2.5, enable sanitization of uploaded images and restrict SVG upload to only administrators. For version 2.5.1, enable sanitization of uploaded images and restrict SVG upload to only administrators.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4022

Affected Products

Svg Support

References · 5

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2776612%40svg-support%2Ftrunk&old=2672900%40svg-support%2Ftrunk&sfp_email=&sfph_mail= · Patch
• https://osv.dev/vulnerability/CVE-2022-4022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4022 · Security Note
• https://t.me/cibsecurity/53060 · Telegram Post
• https://wordfence.com/vulnerability-advisories-continued/#CVE-2022-4022 · Note