CVE-2021-24236 Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE

2021-05-0518:39:42

CWE-434

WPScan

www.cve.org

imagements wordpress plugin

unauthenticated

arbitrary file upload

rce

AI Score

9.8

Confidence

High

EPSS

0.178

Percentile

96.2%

JSON

The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.

CNA Affected

[
  {
    "product": "Imagements",
    "vendor": "williewonka",
    "versions": [
      {
        "lessThanOrEqual": "1.2.5",
        "status": "affected",
        "version": "1.2.5",
        "versionType": "custom"
      }
    ]
  }
]