Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: dFactory Component: Download Attachments Clear all filters
TI-2023-00072 CVE-2023-0076 · GHSA-m967-grxx-4qjp

Download Attachments < 1.3 - Contributor+ Stored XSS

Priority LOW 25

The Download Attachments WordPress plugin before 1.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00482 Published 2023-03-06 Fixed in 1.3