Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation, CVE-2021-24736

CVE, Research URL: CVE-2021-24736
Home page URL: Security reports for Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation
Application: Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation
Published on: Oct 18, 2021
Research Description: The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.
Affected versions: Min -, max 1.7.1.
Status: vulnerable

Shared Files – Advanced File Sharing &amp; Download Manager with Frontend Uploads &amp; Lead Generation, CVE-2021-24736