← Database

CVE-2022-0595

MEDIUM CVSS: 5.4 Published: 2022-03-28 Modified: 2026-06-17

Description

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action, which could lead to Stored Cross-Site Scripting issue

Affected Platforms

Codedropz Drag And Drop Multiple File Upload - Contact Form 7

Weakness Type

CWE-79

References