Lucene search
PRIOn knowledge basePRION:CVE-2023-5953HistoryDec 04, 2023 - 10:15 p.m.
Cross site request forgery (csrf)
2023-12-0422:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site request forgery
welcart e-commerce
wordpress
file upload vulnerability
ajax action
php file upload
The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server
| CPE | Name | Operator | Version |
|---|---|---|---|
| welcart_e-commerce | lt | 2.9.5 |
Related
cve
cve
CVE-2023-5953
2023-12-04 22:15:08
wpexploit
wpexploit
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
2023-11-10 00:00:00
cvelist
cvelist
CVE-2023-5953 Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
2023-12-04 21:28:03
wpvulndb
wpvulndb
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
2023-11-10 00:00:00
nvd
nvd
CVE-2023-5953
2023-12-04 22:15:08