vulnerability

WordPress Plugin: shared-files: CVE-2021-24736: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Severity
3
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Sep 15, 2021
Added
May 15, 2025
Modified
May 15, 2025

Description

The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.

Solution

shared-files-plugin-cve-2021-24736
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.