CVE-2023-4819 (published 2023-10-16T19:38:55.423Z)
The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload an allowed file extension injected with malicious scripts.
Affected products: Vendor: Unknown
Product: Shared Files
Versions: 0