PT-2023-30864 · WordPress · File Manager Pro

Alex Sanford · Published 2023-10-16 · Updated 2023-10-20 · CVE-2023-4862

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions File Manager Pro WordPress plugin version 1.8.0 and earlier

Description The issue arises from inadequate validation and escaping of some inputs in the File Manager Pro WordPress plugin, leading to cross-site scripting (XSS) attacks by high-privilege users.

Recommendations For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2023-4862

Affected Products

File Manager Pro

References · 6

• 🔥 https://wpscan.com/vulnerability/81821bf5-69e1-4005-b3eb-d541490909cc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-4862 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4862 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1714051727056376294 · Twitter Post
• https://twitter.com/CVEnew/status/1714006547745923568 · Twitter Post
• https://t.me/cibsecurity/72362 · Telegram Post