← back
CVE-2023-4862

File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
exploitation probability
0.4%top 68% of all CVEs
observed exploitation
nono source reports it
The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users.