CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.
Explanation of Vulnerability in Simple Terms
User Submitted Posts allows attackers to upload files without restriction, potentially enabling them to run malicious code on the site. The vulnerability requires network access but no authentication or user interaction. An attacker can upload executable files through the front-end submission form, compromising the entire site and any data it contains.
What an attacker can do
Upload and execute malicious files on the site without authentication.
Potential impact on your site
Attackers can run arbitrary code, steal data, deface content, or take over the site entirely.
Conditions required to exploit
Network access to the site; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
