CVE-2023-4821 — Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting

CVE-2023-4821

Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.

Affected (CNA)

Vendor / product	Versions
Unknown / Drag and Drop Multiple File Upload for WooCommerce	affected 0 before 1.1.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3ac0853b-03f7-44b9-aa9b-72df3e01a9b5

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/3ac0853b-03f7-44b9-aa9b-72df3e01a9b5

CISA-ADP

No English description supplied.

No references supplied.