WordPress File Upload plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress File Upload plugin versions prior to 4.16.3 have a cross-site scripting vulnerability that stems from the plugin’s failure to evade some of its short code parameters, which could be exploited by attackers to perform cross-site scripting attacks. can use this vulnerability to perform cross-site scripting attacks.