Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation, CVE-2023-4819

CVE, Research URL: CVE-2023-4819
Home page URL: Security reports for Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation
Application: Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation
Published on: Oct 17, 2023
Research Description: The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload an allowed file extension injected with malicious scripts.
Affected versions: Min -, max 1.7.6.
Status: vulnerable

Shared Files – Advanced File Sharing &amp; Download Manager with Frontend Uploads &amp; Lead Generation, CVE-2023-4819