Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h7fj-9vcc-c7hx

Опубликовано: 12 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

EPSS

Процентиль: 41%
0.0019
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 4.8
nvd
больше 1 года назад

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

EPSS

Процентиль: 41%
0.0019
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-434