wpForo + wpForo Advanced Attachments vulnerabilities
1 known vulnerability in wpForo + wpForo Advanced Attachments from gVectors. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
wpForo + wpForo Advanced Attachments: Improper Neutralization of Input During Web Page Generation
The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for