CyberRota
← Ana sayfaya dön

CVE-2026-13330

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-30T06:24:59.177 · Çekilme zamanı: 2026-07-30T12:08:54.046033+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-13330
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress Java

Orijinal NVD Açıklaması

The Animation Addons for Elementor WordPress plugin before 2.7.0 does not sanitise uploaded SVG/SVGZ files, which it adds to the list of allowed upload types, allowing users with the upload_files capability (Author and above) to upload files containing malicious JavaScript, leading to Stored Cross-Site Scripting.