CVE-2021-23562

CVE-2021-23562 is a high-severity vulnerability affecting the plupload package prior to version 2.3.9, specifically impacting tiny plupload. It allows an attacker to upload a malicious file containing JavaScript code, which could then be executed if a user is tricked into uploading it. This vulnerability has a CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability, with a network attack vector and user interaction required. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.