Description
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Avirtum | iFolders | ≤ 1.5.0 | — |
Medium · 5.9
CVE-2023-41949
EUVD-2023-46408GHSA-m43v-v86m-9wxf
WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)
Published Sep 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack