CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.
Explanation of Vulnerability in Simple Terms
CubeWP versions up to 1.1.12 allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files, potentially gaining control over the site. The vulnerability affects confidentiality, integrity, and availability of the entire system.
What an attacker can do
Upload malicious files and execute code on the site.
Potential impact on your site
Compromised site with potential data theft, defacement, or complete takeover.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
