Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 1.0.34...
6.8CVSS6.3AI score0.00664EPSS
SaveExploits1References3
ATTACKERKB•added 2021/06/01 2:15 p.m.•6 views
CVE-2021-24311
The wpajaxupload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users...
