| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress file upload | < 4.24.8 | 4.24.8 |
The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting (XSS) attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free