CVE-2021-24736

MEDIUM 4.8CVE-2021-24736 · Published 18/10/2021 · updated 17/06/2026

In short

CVE-2021-24736 is a MEDIUM (CVSS 4.8) vulnerability affecting shared files (tammersoft).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 51.0% of all vulnerabilities.
Fix: update to 1.6.57 or later.

Package	Affected versions	Patched versions
shared files tammersoft	`< 1.6.57`	`1.6.57`

Description

The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.

References

wpscan.com/vulnerability/d72275bd-0c66-4b2a-940d-d5256b5426cc · Exploit

More vulnerabilities in shared files

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free