Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Zion Builder
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-104676 | 1 Wordpress-extensions | 1 Zion Builder | 2026-11-12 | 6.8 Medium |
| The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents before storing them in a publicly accessible location and serving them from the site's own origin, allowing authenticated users with the Author role or above to upload a crafted SVG containing JavaScript that executes in the browser of anyone who opens the file. | ||||
Page 1 of 1.