CVE-2026-104676
Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG Upload
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents before storing them in a publicly accessible location and serving them from the site's own origin, allowing authenticated users with the Author role or above to upload a crafted SVG containing JavaScript that executes in the browser of anyone who opens the file.
| Vendor | unknown |
| Product | zion builder |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown zion builder
Be the first to know when new unknown vulnerabilities affecting unknown zion builder are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Zion Builder
0 ≤ 3.6.17
References
Credits
Suhayb Ahmed (cyboltx) WPScan