Vendor
The Nickboss WordPress File Upload plugin (up to version 5.2.1) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.