CVE-2023-4821

The CVE-2023-4821 entry describes an unauthenticated stored Cross-Site Scripting vulnerability in the WordPress plugin Drag and Drop Multiple File Upload for WooCommerce (before 1.1.1). The flaw arises because the plugin does not filter all potentially dangerous file extensions (e.g., .shtml, .sv...

CVE-2023-4821 Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts...

CVE-2023-4821 Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts...

WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin < 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Drag and Drop Multiple File Upload for WooCommerce Type Plugin Vulnerable versions 1.1.1 Fixed in 1.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4821 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...