CVE-2023-4811
The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.
- Affected products
- Wordpress File Upload
- Iptanus Wordpress File Upload
- < 4.23.3
- Fix
- Available
- CVSS 3.1
- 5.4 MEDIUM
- EPSS
- 0.4% (33th percentile)
- NVD status
- Modified
- Published
- 2023-10-16
CVE-2023-4811 at NVD
2 known exploits for CVE-2023-4811
Proof-of-concept code and exploit modules indexed by Sploitus