Lucene search
PRIOn knowledge basePRION:CVE-2021-24253HistoryMay 06, 2021 - 1:15 p.m.
Cross site request forgery (csrf)
2021-05-0613:15:00
PRIOn knowledge base
www.prio-n.com
5
The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.
| CPE | Name | Operator | Version |
|---|---|---|---|
| classyfrieds | le | 3.8 |
Related
wpvulndb
wpvulndb
Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE
2021-04-10 00:00:00
wpexploit
wpexploit
Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE
2021-04-10 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-24253
2021-05-06 13:15:11
nvd
nvd
CVE-2021-24253
2021-05-06 13:15:11
patchstack
patchstack