WordPress File Upload (N/a Through 5.2.2)

The Nickboss WordPress File Upload plugin (versions n/a through 5.2.2) contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.