Lucene search
Apple502jPATCHSTACK:159221F3DDAA4BE0EC5DAE071C90C858HistoryFeb 14, 2022 - 12:00 a.m.
WordPress File Upload Pro premium plugin <= 4.16.2 - Stored Cross-Site Scripting (XSS) via Malicious SVG vulnerability
2022-02-1400:00:00
apple502j
patchstack.com
18
wordpress
file upload
cross-site scripting
xss
malicious svg
vulnerability
update
premium plugin
EPSS
0.001
Percentile
21.4%
Stored Cross-Site Scripting (XSS) via Malicious SVG vulnerability discovered by apple502j in WordPress File Upload Pro premium plugin (versions <= 4.16.2).
Solution
Update the WordPress File Upload Pro premium plugin to the latest available version (at least 4.16.3).
Related
wpexploit
wpexploit
patchstack
patchstack
nvd
nvd
CVE-2021-24960
2022-03-07 09:15:08
cnvd
cnvd
prion
prion
Cross site scripting
2022-03-07 09:15:00
wpvulndb
wpvulndb
cvelist
cvelist
cve
cve
CVE-2021-24960
2022-03-07 09:15:08