From a62e8cd1d083dc69125c68f44ea03985e9df40a1 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 1 Apr 2025 21:01:27 +0000
Subject: [PATCH] Publish GHSA-v2rr-fhv8-mx74

---
 .../GHSA-v2rr-fhv8-mx74.json                  | 37 ++++++++++++++++---
 1 file changed, 32 insertions(+), 5 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json (53%)

diff --git a/advisories/unreviewed/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json b/advisories/github-reviewed/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json
similarity index 53%
rename from advisories/unreviewed/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json
rename to advisories/github-reviewed/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json
index a57071323e5..05ec0946773 100644
--- a/advisories/unreviewed/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json
+++ b/advisories/github-reviewed/2025/03/GHSA-v2rr-fhv8-mx74/GHSA-v2rr-fhv8-mx74.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v2rr-fhv8-mx74",
-  "modified": "2025-03-26T21:31:06Z",
+  "modified": "2025-04-01T20:59:14Z",
   "published": "2025-03-26T06:31:37Z",
   "aliases": [
     "CVE-2024-11847"
   ],
+  "summary": "wp-svg-upload WordPress plugin vulnerable to Stored Cross-site Scripting",
   "details": "The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.",
   "severity": [
     {
@@ -13,22 +14,48 @@
       "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "digimix/wp-svg-upload"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "1.0.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11847"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/digimix/wp-svg-upload"
+    },
     {
       "type": "WEB",
       "url": "https://wpscan.com/vulnerability/f57ecff2-0cff-40c7-b6e4-5b162b847d65"
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-01T20:59:13Z",
     "nvd_published_at": "2025-03-26T06:15:28Z"
   }
 }
\ No newline at end of file