Lucene search
WPScanCVELIST:CVE-2021-24663HistorySep 20, 2021 - 10:06 a.m.
CVE-2021-24663 Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File Upload
2021-09-2010:06:49
CWE-434
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
42.9%
The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, leading to RCE
CNA Affected
[
{
"product": "Simple Schools Staff Directory",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "1.1",
"status": "affected",
"version": "1.1",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2021-24663
2021-09-20 10:15:09
nvd
nvd
CVE-2021-24663
2021-09-20 10:15:09
wpvulndb
wpvulndb
Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File Upload
2021-08-23 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File Upload
2021-08-23 00:00:00
prion
prion
Design/Logic Flaw
2021-09-20 10:15:00