CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through <= 4.3.0.
Explanation of Vulnerability in Simple Terms
The Novel Design Store Directory allows unauthenticated attackers to upload files without restriction. An attacker can upload malicious files—including executable code—directly to the site with no authentication required. This can lead to complete compromise of the site, including data theft, defacement, and malware installation. All versions up to 4.3.0 are affected.
What an attacker can do
Upload and execute malicious files on the site without authentication.
Potential impact on your site
Complete site compromise: attackers can run code, steal data, deface content, or install malware.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
