Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:36:36 +0000 CVE-2023-4821 — Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting https://cve.radiocsirt.org/vuln/cve-2023-4821 <p><strong>Affected:</strong> Unknown Drag and Drop Multiple File Upload for WooCommerce</p> <p>The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.</p> <p><strong>Affected:</strong> Unknown Drag and Drop Multiple File Upload for WooCommerce</p> <p>The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.</p> https://cve.radiocsirt.org/vuln/cve-2023-4821