← Database

CVE-2024-6494

MEDIUM CVSS: 6.1 Published: 2024-08-07 Modified: 2026-06-17

Description

The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting (XSS) attacks.

Affected Platforms

Iptanus Wordpress File Upload

Weakness Type

CWE-79

References