Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Frontend Uploader Project Clear all filters
TI-2021-06848 CVE-2021-24563 · GHSA-287r-36rw-cfgc

Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting

Priority MEDIUM 49

The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which wi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.26272 Published 2021-10-11 No fix listed CWE-79
TI-2014-07671 CVE-2014-9444 · GHSA-7vqg-9r7p-xh2f

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type][0][name] parameter to th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06527 Published 2015-01-02 No fix listed CWE-79