CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects WordPress, Java.
CVE
CVE-2024-8673
Severity
CRITICAL
CVSS
9.1
EPSS
1.62%
WordPress Java
Original NVD Description
The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.
Related CVEs
Other vulnerabilities affecting the same vendor(s)