Security Advisory

CVE-2021-34625

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-07-07 12:21:38
Last updated 2024-09-16 18:56:07
Assigner Wordfence
State PUBLISHED

Description

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.