CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in WPZita Zita Elementor Site Library allows Upload a Web Shell to a Web Server.This issue affects Zita Elementor Site Library: from n/a through 1.6.1.
Explanation of Vulnerability in Simple Terms
Zita Elementor Site Library versions up to 1.6.1 allow authenticated users to upload files without proper validation. An attacker with low-level site access can upload malicious files, including PHP scripts, to execute code on the server. This affects confidentiality, integrity, and availability of the entire site.
What an attacker can do
Upload and execute malicious files (including PHP code) on the server to compromise the site.
Potential impact on your site
Compromised site with potential data theft, malware injection, or complete takeover via uploaded code execution.
Conditions required to exploit
Attacker needs a low-privilege user account on the site (subscriber or contributor level).
Key dates
External resources
Related vulnerabilities
