Lucene search
Veracode Vulnerability DatabaseVERACODE:20707HistoryJul 08, 2019 - 12:28 p.m.
Cross-Site Scripting (XSS)
2019-07-0812:28:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
39.5%
The mndpsingh287 file manager plugin is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the public_path parameter in the wp_file_manager_root page.
Related
cvelist
cvelist
CVE-2018-16967
2019-04-15 20:39:53
prion
prion
Cross site scripting
2019-04-15 21:29:00
cve
cve
CVE-2018-16967
2019-04-15 21:29:00
nvd
nvd
CVE-2018-16967
2019-04-15 21:29:00
wpexploit
wpexploit
File Manager < 3.1 - CSRF to Stored Cross-Site Scripting
2018-09-17 00:00:00
wpvulndb
wpvulndb
File Manager < 3.1 - CSRF to Stored Cross-Site Scripting
2018-09-17 00:00:00
openvas
openvas
WordPress File Manager Plugin <= 3.0 Multiple Vulnerabilities
2019-04-17 00:00:00