CVE-2023-6708

The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG upload feature in all versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping, even when the 'Sanitize SVG while uploading' feature is enabled. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note that successful exploitation of this vulnerability requires the administrator to allow author-level users to upload SVG files. As of 2.5.6, SVG sanitization can still be bypassed by supplying a content-type other than image/svg+xml.

• CWE-79

• https://plugins.trac.wordpress.org/browser/svg-support/trunk/functions/attachment.php#L235
• https://plugins.trac.wordpress.org/browser/svg-support/trunk/svg-support.php#L110
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3133760%40svg-support&new=3133760%40svg-support&sfp_email=&sfph_mail=
• https://wordpress.org/plugins/svg-support/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/72bcfd2a-6803-4073-8fa9-62bcf0a10571?source=cve
• https://plugins.trac.wordpress.org/browser/svg-support/trunk/functions/attachment.php#L235
• https://plugins.trac.wordpress.org/browser/svg-support/trunk/svg-support.php#L110
• https://wordpress.org/plugins/svg-support/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/72bcfd2a-6803-4073-8fa9-62bcf0a10571?source=cve

Published

Jul 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6702Type confusion in V8 in Google Chrome prior to 120.0.6099.10…8.8
• CVE-2023-6703Use after free in Blink in Google Chrome prior to 120.0.6099…8.8
• CVE-2023-6704Use after free in libavif in Google Chrome prior to 120.0.60…8.8
• CVE-2023-6705Use after free in WebRTC in Google Chrome prior to 120.0.609…8.8
• CVE-2023-6706Use after free in FedCM in Google Chrome prior to 120.0.6099…8.8
• CVE-2023-6707Use after free in CSS in Google Chrome prior to 120.0.6099.1…8.8
• CVE-2023-6709Improper Neutralization of Special Elements Used in a Templa…8.8
• CVE-2023-6710A flaw was found in the mod_proxy_cluster in the Apache serv…5.4
• CVE-2023-6711Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 6087…7.5
• CVE-2023-6716Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Al…
• CVE-2023-6717A flaw was found in the SAML client registration in Keycloak…6
• CVE-2023-6718An authentication bypass vulnerability has been found in Rep…7.5