CVE-2024-6494 — WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS

CVE-2024-6494

WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting (XSS) attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / WordPress File Upload	affected 0 before 4.24.8

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/5b21a9be-b5fe-47ef-91c7-018dd42f763f/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.