Threats tagged 'ghsa-3rmg-cjqw-3jwm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-123460Nickboss · Cross-site Scripting High7.12026-11-09GCVE DatabaseCVE-2026-123460 A stored cross-site scripting (XSS) vulnerability exists in the Nickboss WordPress File Upload plugin (wp-file-upload) through version 5.2.2. This flaw allows improper neutralization of input during web page generation, enabling attackers to inject malicious scripts that can execute in users' browsers. Report on CVE-2026-123460 Vulnerability CWE-79 #ghsa-3rmg-cjqw-3jwm	GCVE Database	2026-11-09

Page 1 of 1