Safe SVG, CVE-2019-18854

CVE, Research URL: CVE-2019-18854
Home page URL: Security reports for Safe SVG
Application: Safe SVG
Published on: Nov 11, 2019
Research Description: A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '<use ... xlink:href="#identifier">' substring.
Affected versions: Min -, max 1.9.5.
Status: vulnerable