Unknown Avif Uploader vulnerabilities

• grandplugins avif uploader AVIF & SVG Uploader <= 1.1.0 - Author+ Stored XSS via SVG Uplaod CVE-2024-9238 5.4 MediumMay 15, 2025
• grandplugins avif uploader AVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-9060 6.4 MediumOctober 1, 2024