medium6.1
CVE-2024-6494
The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to e…
Impact
The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting (XSS) attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iptanus | Wordpress File Upload | before 4.24.8 |