PT-2024-39220 · Unknown · Bit File Manager

🗓️ 04 Oct 2024 00:00:00Reported by Positive TechnologiesType

Bit File Manager allows authenticated subscribers to upload Cascading Style Sheets and JavaScript, enabling stored cross site scripting.

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for CVE-2024-8743	9 Jan 202508:54	–	githubexploit
Circl	CVE-2024-8743	5 Oct 202409:35	–	circl
CNNVD	WordPress plugin Bit File Manager 代码问题漏洞	5 Oct 202400:00	–	cnnvd
CVE	CVE-2024-8743	5 Oct 202406:44	–	cve
Cvelist	CVE-2024-8743 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload	5 Oct 202406:44	–	cvelist
NVD	CVE-2024-8743	5 Oct 202407:15	–	nvd
Patchstack	WordPress Bit File Manager Plugin <= 6.5.7 is vulnerable to Arbitrary File Upload	7 Oct 202400:00	–	patchstack
Patchstack	WordPress Bit File Manager plugin <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload vulnerability	7 Oct 202400:33	–	patchstack
RedhatCVE	CVE-2024-8743	23 May 202507:18	–	redhatcve
Vulnrichment	CVE-2024-8743 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload	5 Oct 202406:44	–	vulnrichment

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8743
twitter	www.twitter.com/gothburz/status/1877846207998902327
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/314520d5-bd9d-46c1-b903-5e5cb3bb3417
twitter	www.twitter.com/CVEnew/status/1842458015322296701
t	www.t.me/cvenotify/97123
twitter	www.twitter.com/VulmonFeeds/status/1842517459888202223
t	www.t.me/cvedetector/7042
plugins	www.plugins.trac.wordpress.org/changeset/3161219

10 Jan 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.8

EPSS0.42929

SSVC