CVE-2021-36895

MEDIUM CVSS: 4.7 Published: 2022-04-26 Modified: 2026-06-17

Description

Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.

Affected Platforms

Tripetto Tripetto

Weakness Type

CWE-79

References