CVE-2023-4811

State: PUBLISHED · Published: 2023-10-16 · Updated: 2025-04-23 · Assigner: WPScan

Description

The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.

CWE

(none)

Affected

Unknown / WordPress File Upload — v=0 <4.23.3 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/7f9271f2-4de4-4be3-8746-2a3f149eb1d1 exploit, vdb-entry, technical-description

Source

cvelistV5-main/cves/2023/4xxx/CVE-2023-4811.json