Lucene search
Veno EivazianWPVDB-ID:1CF3D256-CF4B-4D1F-9ED8-E2CC6392D8D8HistoryFeb 26, 2021 - 12:00 a.m.
WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)
2021-02-2600:00:00
Veno Eivazian
wpscan.com
10
0.001 Low
EPSS
Percentile
26.6%
During a quick security auditing of the plugin, in the default configuration a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a payload is submitted on the User-Agent parameter. The payload is then reflected back on the web application response.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-file-manager | lt | 7.1 |
Related
nvd
nvd
CVE-2021-24177
2021-04-05 19:15:16
CVE-2021-27802
2021-04-29 16:15:09
cve
cve
CVE-2021-24177
2021-04-05 19:15:16
CVE-2021-27802
2021-04-29 16:15:09
prion
prion
Default configuration
2021-04-05 19:15:00
cvelist
cvelist
CVE-2021-24177 WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)
2021-04-05 18:27:45