GCVE - cpe:2.3:a:frontend_uploader_project:frontend

Approved changes feed: RSS · Atom

cpe:2.3:a:frontend_uploader_project:frontend_uploader:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Frontend Uploader Project (`73a325b6-d494-52df-ae40-3c1b24953c0d`)
Product	Frontend Uploader (`729b07bd-5967-5b65-b2e6-9e62788f6ea6`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-24563`	vulnerable	2026-06-08 05:30:38.764253	Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly Published: 2021-10-11T10:45:30.000Z Updated: 2024-08-03T19:35:20.198Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/e53ef41e-a176-4d00-916a-3a03835370f1 http://packetstormsecurity.com/files/165515/WordPress-Frontend-Uploader-1.3.2-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.