CVE-2025-27358
WordPress Frontend File Manager plugin <= 23.2 - Content Injection Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in mndpsingh287 Frontend File Manager allows Code Injection. This issue affects Frontend File Manager: from n/a through 23.2.
Vulnerabilidad de neutralización incorrecta de etiquetas HTML relacionadas con scripts en una página web (XSS básico) en mndpsingh287 Frontend File Manager permite la inyección de código. Este problema afecta al gestor de archivos frontend desde la versión n/d hasta la 23.2.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager allows Code Injection.This issue affects Frontend File Manager: from n/a through 23.2.
The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 23.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject content.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2025-02-21 CVE Reserved
- 2025-07-04 CVE Published
- 2025-07-04 EPSS Updated
- 2025-07-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- CWE-862: Missing Authorization
CAPEC
- CAPEC-242: Code Injection
References (2)
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Nmedia User File Uploader Search vendor "Nmedia User File Uploader" | Nmedia User File Uploader Search vendor "Nmedia User File Uploader" for product "Nmedia User File Uploader" | >= 0.0 <= 23.2 Search vendor "Nmedia User File Uploader" for product "Nmedia User File Uploader" and version " >= 0.0 <= 23.2" | en |
Affected
|