RSS   Vulnerabilities for 'Shared files'   RSS

2021-11-17
 
CVE-2021-24856

CWE-79
 

 
The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

 
2021-10-18
 
CVE-2021-24736

CWE-79
 

 
The Easy Download Manager and File Sharing Plugin with frontend file upload ??�??�?? a better Media Library ??�??�?� Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.

 


Copyright 2024, cxsecurity.com

 

Back to Top