CVE-2023-4811 (published 2023-10-16T19:39:16.639Z)
The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.
Affected products: Vendor: Unknown
Product: WordPress File Upload
Versions: 0