https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 19:54:38 +0000 https://db.gcve.eu/vuln/cve-2026-104676 <p><strong>Affected:</strong> Unknown Zion Builder</p> <p>The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents before storing them in a publicly accessible location and serving them from the site&#39;s own origin, allowing authenticated users with the Author role or above to upload a crafted SVG containing JavaScript that executes in the browser of anyone who opens the file.</p> <p><strong>Affected:</strong> Unknown Zion Builder</p> <p>The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents before storing them in a publicly accessible location and serving them from the site&#39;s own origin, allowing authenticated users with the Author role or above to upload a crafted SVG containing JavaScript that executes in the browser of anyone who opens the file.</p> https://db.gcve.eu/vuln/cve-2026-104676