Lucene search
PRIOn knowledge basePRION:CVE-2021-24254HistoryMay 06, 2021 - 1:15 p.m.
Cross site request forgery (csrf)
2021-05-0613:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
44.7%
The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| college_publisher_import | le | 0.1 |
Related
cnvd
cnvd
WordPress College publisher Import plugin file upload vulnerability
2021-05-07 00:00:00
nvd
nvd
CVE-2021-24254
2021-05-06 13:15:11
wpvulndb
wpvulndb
College Publisher Import <= 0.1 - Arbitrary File Upload to RCE
2021-04-11 00:00:00
wpexploit
wpexploit
College Publisher Import <= 0.1 - Arbitrary File Upload to RCE
2021-04-11 00:00:00
cve
cve
CVE-2021-24254
2021-05-06 13:15:11
cvelist
cvelist
patchstack
patchstack