TI-2024-12745 CVE-2024-13706 · GHSA-53gc-fm45-xq5f
WP Image Uploader <= 1.0.1 - Reflected Cross-Site Scripting
Priority LOW 27
The WP Image Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'file' parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping.