CVE-2021-24960

CVE-2021-24960

The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as Contributor to configure the upload form in a way that allows uploading of SVG files, which could be then be used for Cross-Site Scripting attacks

Source: CVE-2021-24960

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다