Input validation vulnerability in WordPress File Upload 4.23.3

The WordPress File Upload plugin for WordPress has a security issue that can lead to malicious code being stored in certain websites. It affects versions up to, and including, 4.23.2. If an attacker with administrator-level permissions or above is able to access the website, they can inject web scripts into pages that will execute whenever a user accesses them. This issue only affects multi-site installations and those where the option “unfiltered_html” has been disabled.