CVE-2023-7015

CVE-2023-7015 concerns the WordPress plugin File Manager Pro. A reflected XSS via the tb parameter exists in all versions up to 8.3.4 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts in pages executed after user actions (e.g., clicki...