All security reports
NVD security advisoryHigh

High advisory for Improper Neutralization of Input During

CVE-2026-66570 · Reported 1 Nov 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Improper Neutralization of Input DuringAffected product

Advisory overview

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account