logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2023-1282

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2023-1282

Description:
The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations WordPress plugin before 5.0.6.4 do not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins.
Last updated date:
04/25/2023
Type:
exploit
Confidence:
HIGH
Date of publishing:
04/25/2023
Reference url to background

https://wpscan.com/vulnerability/8a9548c5-59ea-46b0-bfa5-a0f7a259351a

Type:
exploit
Confidence:
HIGH
Date of publishing:
04/25/2023
Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy