Vulnerabilities and Security Researches

Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation, CVE-2021-24856

CVE, Research URL: CVE-2021-24856
Home page URL: Security reports for Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation
Application: Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation
Published on: Nov 17, 2021
Research Description: The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected versions: Min -, max 1.6.72.
Status: vulnerable