WordPress File Upload plugin versions prior to 4.23.3 suffer from a persistent cross site scripting vulnerability.