Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-42w6-9898-chc9

Опубликовано: 30 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.

EPSS

Процентиль: 71%
0.00674
Низкий

7.2 High

CVSS3

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.

EPSS

Процентиль: 71%
0.00674
Низкий

7.2 High

CVSS3