CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipbook-from-pdf allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through <= 1.2.
Explanation of Vulnerability in Simple Terms
Creates 3D Flipbook, PDF Flipbook versions 1.2 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files, potentially gaining control of the site. The vulnerability affects confidentiality, integrity, and availability of the affected system and potentially other connected systems.
What an attacker can do
Upload malicious files to the server and execute arbitrary code or compromise the site.
Potential impact on your site
Compromised site integrity, data theft, malware distribution, and potential lateral movement to other systems.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
