CVE-2021-25119

CVE-2021-25119: AGIL <= 1.0 - Admin+ Arbitrary File Upload

Vendor Unknown
Product AGIL(Automatic Grid Image Listing)
Weakness CWE-434 · Unrestricted file upload
Published May 16, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE

Key dates

02Disclosure timeline

May 16, 2022 CVE published
August 3, 2024 Record updated