https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T11:34:57.535635+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-79627 CVE-2026-79627 — Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass 2026-11-07T11:34:57.536677+00:00

Affected: Unknown Advanced File Manager

The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users granted file-manager access by an administrator to store a file containing script that is not stripped and that runs in the browser of anyone who opens it, including an administrator.