Input validation vulnerability in CITS Support svg, webp Media and TTF,OTF File Upload 3.0

The CITS Support plugin for WordPress, which allows users to upload SVG, webp, TTF, and OTF files, is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack could allow an authenticated user with Author permissions or higher to inject malicious code into webpages. If a user visits an injected page, the malicious code will execute. This vulnerability exists in the CITS Support plugin up to and including version 2.1.0, because the plugin does not properly sanitize the SVG files before they are uploaded.