Exploit for CVE-2023-4636

CVE-2023-4636 - The vulnerability in the limelight is an unau...

WordPress User Private Files Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software User Private Files Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4636 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a3eddd47293a Credits Shuning Xu Required...

CVE-2023-4636

The CVE-2023-4636 issue affects the WordPress File Sharing Plugin for WordPress, version 2.0.3 and earlier. It is a Stored Cross-Site Scripting vulnerability caused by insufficient input sanitization and output escaping in admin settings, exploitable by authenticated users with administrator-leve...