title: User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
description: The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
product: Frontend File Manager & Sharing – User Private Files
vendor: Unknown
versions:
lessThan: 1.1.3, status: affected, version: 1.1.3, versionType: custom
}