Input validation vulnerability in Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads 1.7.5

The Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This means that attackers can use uploaded files to inject malicious code into the plugin, which will then execute every time a user views the injected upload. This affects all versions of the plugin up to and including version 1.7.5 because the plugin does not provide the correct ‘Content-Type’ header when viewing uploaded files.