Skip to content
OpenAdvisories
Unscored CVE-2023-4862 EUVD-2023-54702GHSA-x7gg-f2xv-xw56

File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting

Published Oct 16, 2023 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users.

Affected products

VendorProductAffectedFixed
— File Manager Pro < 1.8.1 1.8.1

References