Lucene search

K
patchstackApple502jPATCHSTACK:51D2C95581B13AB09DFB8CE898B2BC1C
HistoryFeb 14, 2022 - 12:00 a.m.

WordPress File Upload plugin <= 4.16.2 - Contributor+ Stored Cross-Site Scripting (XSS) via Shortcode vulnerability

2022-02-1400:00:00
apple502j
patchstack.com
15
wordpress file upload
4.16.2
contributor+
stored cross-site scripting
shortcode
vulnerability

EPSS

0.001

Percentile

21.4%

Contributor+ Stored Cross-Site Scripting (XSS) via Shortcode vulnerability discovered by apple502j in WordPress File Upload plugin (versions <= 4.16.2).

Solution

           Update the WordPress File Upload plugin to the latest available version (at least 4.16.3).

EPSS

0.001

Percentile

21.4%

Related for PATCHSTACK:51D2C95581B13AB09DFB8CE898B2BC1C