PT-2023-32743 · WordPress · Svg Support

D0Nut + 1 · Published 2023-12-12 · Updated 2024-07-18 · CVE-2023-6708

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SVG Support plugin for WordPress versions up to, and including, 2.5.5

Description The issue is related to Stored Cross-Site Scripting via the SVG upload feature due to insufficient input sanitization and output escaping. This allows authenticated attackers with author-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires the administrator to allow author-level users to upload SVG files.

Recommendations For versions up to, and including, 2.5.5, consider disabling the SVG upload feature until a patch is available to prevent exploitation. Restrict access to the SVG upload feature to minimize the risk of arbitrary web script injection. Avoid allowing author-level users to upload SVG files until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-6708

Affected Products

Svg Support

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-6708 · Security Note
• https://wordpress.org/plugins/svg-support · Note
• https://t.me/cvenotify/86594 · Telegram Post
• https://twitter.com/d0nutptr/status/1734699978298380489 · Twitter Post
• https://plugins.trac.wordpress.org/browser/svg-support/trunk/svg-support.php#L110 · Note
• https://t.me/cvedetector/1140 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3133760%40svg-support&new=3133760%40svg-support&sfp_email=&sfph_mail= · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/72bcfd2a-6803-4073-8fa9-62bcf0a10571?source=cve · Note
• https://plugins.trac.wordpress.org/browser/svg-support/trunk/functions/attachment.php#L235 · Note