Stored Cross-Site Scripting in Frontend File Upload Plugin for WordPress
CVE-2024-13504

7.2HIGH

Key Information:

Vendor
WordPress
Status
Shared Files – Frontend File Upload Form & Secure File Sharing
Vendor
CVE Published:
31 January 2025

Summary

The Frontend File Upload Form & Secure File Sharing plugin for WordPress has a vulnerability that allows for Stored Cross-Site Scripting (XSS) attacks. This occurs through dfxp file uploads due to inadequate input sanitization and output escaping. Attackers can exploit this flaw to inject malicious web scripts that execute whenever a user accesses the tainted dfxp file. It is important to note that this issue predominantly affects installations in Apache-based environments, where dfxp file handling is configured by default.

Affected Version(s)

Shared Files – Frontend File Upload Form & Secure File Sharing * <= 1.7.42

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/shared-files/t...
https://plugins.trac.wordpress.org/changeset?sfp_email=&s...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tim Coen
.