CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through <= 0.3.3.
Explanation of Vulnerability in Simple Terms
Custom Icons for Elementor allows authenticated users with high privileges to upload files without proper validation. An attacker with admin or equivalent access can upload malicious files that may affect the site's confidentiality, integrity, or availability. Update to a version newer than 0.3.3.
What an attacker can do
Upload files without proper validation to the site.
Potential impact on your site
A compromised admin account could upload malicious files affecting site security and functionality.
Conditions required to exploit
Attacker must have high-level admin or equivalent privileges on the site.
Key dates
External resources
Related vulnerabilities
