Lucene search

CVE-2024-7301 WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

🗓️ 16 Aug 2024 04:26:29Reported by WordfenceType

WordPress File Upload plugin vulnerability to Unauthenticated Stored Cross-Site Scriptin

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2024-7301	16 Aug 202405:15	–	cve
NVD	CVE-2024-7301	16 Aug 202405:15	–	nvd
Patchstack	WordPress WordPress File Upload Plugin <= 4.24.8 is vulnerable to Cross Site Scripting (XSS)	16 Aug 202400:00	–	patchstack
RedhatCVE	CVE-2024-7301	5 Feb 202511:56	–	redhatcve
Vulnrichment	CVE-2024-7301 WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload	16 Aug 202404:29	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (August 12, 2024 to August 18, 2024)	22 Aug 202415:46	–	wordfence

[
  {
    "vendor": "nickboss",
    "product": "WordPress File Upload",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "4.24.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-file-upload/tags/4.24.8/lib/wfu_io.php
plugins	www.plugins.trac.wordpress.org/changeset/3136025/
plugins	www.plugins.trac.wordpress.org/browser/wp-file-upload/tags/4.24.8/lib/wfu_security.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e2b16b9c-48c7-4370-839b-696797ff2101
wordpress	www.wordpress.org/plugins/wp-file-upload/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Aug 2024 04:29Current

CVSS37.2

EPSS0.01491

CWE-79