Read the docs

Frontend Uploader Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Frontend Uploader Project records in CISA KEV

No Frontend Uploader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Frontend Uploader 2 records MEDIUM

Records

2 records

TI-2021-06848 CVE-2021-24563 · GHSA-287r-36rw-cfgc

Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting

Priority MEDIUM 49

The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which wi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.26272 Published 2021-10-11 No fix listed CWE-79
TI-2014-07671 CVE-2014-9444 · GHSA-7vqg-9r7p-xh2f

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type][0][name] parameter to th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06527 Published 2015-01-02 No fix listed CWE-79
Open these records in search →