Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Tammersoft Component: Shared Files Clear all filters
TI-2021-07138 CVE-2021-24856 · GHSA-533w-p83m-xgjp

Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_htm…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00668 Published 2021-11-17 Fixed in 1.6.61 CWE-79
TI-2021-07018 CVE-2021-24736 · GHSA-hvpq-m9vj-27gf

Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00643 Published 2021-10-18 Fixed in 1.6.57 CWE-79