CVE-2023-40204

CVE-2023-40204 (WordPress Folders plugin) : Unrestricted Upload of File with Dangerous Type in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager. Affected versions: plugin 2.9.2, specifically 2.9.3 or later, as cited by Patchstack. Additional context...

CVE-2024-7317

CVE-2024-7317 affects the WordPress plugin Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager (vulnerable up to 3.0.3). It permits stored cross-site scripting via SVG uploads due to insufficient input sanitization and output escaping. Exploitation requires an...