Lucene search
Apple502jPATCHSTACK:B6E7F6277EBB832E30B83AC52E73A7EFHistoryFeb 14, 2022 - 12:00 a.m.
WordPress File Upload plugin <= 4.16.2 - Stored Cross-Site Scripting (XSS) via Malicious SVG vulnerability
2022-02-1400:00:00
apple502j
patchstack.com
10
wordpress
file upload
cross-site scripting
xss
malicious svg
vulnerability
update
EPSS
0.001
Percentile
21.4%
Stored Cross-Site Scripting (XSS) via Malicious SVG vulnerability discovered by apple502j in WordPress File Upload plugin (versions <= 4.16.2).
Solution
Update the WordPress File Upload plugin to the latest available version (at least 4.16.3).
Related
wpexploit
wpexploit
patchstack
patchstack
nvd
nvd
CVE-2021-24960
2022-03-07 09:15:08
cnvd
cnvd
prion
prion
Cross site scripting
2022-03-07 09:15:00
wpvulndb
wpvulndb
cvelist
cvelist
cve
cve
CVE-2021-24960
2022-03-07 09:15:08