Test ID:	1.3.6.1.4.1.25623.1.0.124738
Category:	Web application abuses
Title:	WordPress File Manager Plugin < 7.1 XSS Vulnerability
Summary:	The WordPress plugin 'File Manager' is prone to a cross-site; scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'File Manager' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: In the default configuration a reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a payload is submitted on the user-agent parameter. Affected Software/OS: WordPress File Manager plugin prior to version 7.1. Solution: Update to version 7.1 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-24177 https://wpscan.com/vulnerability/1cf3d256-cf4b-4d1f-9ed8-e2cc6392d8d8 https://n4nj0.github.io/advisories/wordpress-plugin-wp-file-manager-i/ https://plugins.trac.wordpress.org/changeset/2476829/
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.