Lucene search
Shivam RaiWPEX-ID:D72275BD-0C66-4B2A-940D-D5256B5426CCHistorySep 15, 2021 - 12:00 a.m.
Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
2021-09-1500:00:00
Shivam Rai
279
0.001 Low
EPSS
Percentile
24.9%
The plugin does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.
Put the following payload in the "Folder for new files" and "Maximum size of uploaded file" settings of the plugin: "><script>alert(/XSS/)</script>Related
cnvd
cnvd
wpvulndb
wpvulndb
Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
2021-09-15 00:00:00
patchstack
patchstack
prion
prion
Cross site scripting
2021-10-18 14:15:00
cve
cve
CVE-2021-24736
2021-10-18 14:15:09
cvelist
cvelist
CVE-2021-24736 Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
2021-10-18 13:46:06
nvd
nvd
CVE-2021-24736
2021-10-18 14:15:09