Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7862-qcxg-7h4c

Опубликовано: 27 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to remote code execution.

The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to remote code execution.

EPSS

Процентиль: 91%
0.06992
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to remote code execution.

EPSS

Процентиль: 91%
0.06992
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434