Non notée
CVE-2023-4862 The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS…
Description
The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| File Manager Pro 1.8 | premières → < 1.8.1 | 1.8.1 |
Autres CVE de File Manager Pro
Les 5 CVE de File Manager Pro →
CVE-2026-85081
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro …
7.5
Élevée
CVE-2026-6382
The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager…
9.1
Critique
CVE-2023-4861
The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments…
7.2
Élevée
CVE-2023-4827
The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX…
8.8
Élevée