Drag and Drop Multiple File Upload for WooCommerce, CVE-2023-4821

CVE, Research URL: CVE-2023-4821
Home page URL: Security reports for Drag and Drop Multiple File Upload for WooCommerce
Application: Drag and Drop Multiple File Upload for WooCommerce
Published on: Oct 17, 2023
Research Description: The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.
Affected versions: Min -, max 1.1.1.
Status: vulnerable