CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress boat-rental-system allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
The Boat Rental Plugin for WordPress versions 1.0.1 and earlier contains an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the site without authentication, potentially gaining the ability to run their own code on the server. This affects all aspects of site security and data integrity. Sites running this plugin are at critical risk.
What an attacker can do
Upload arbitrary files and run their own code on the site without needing to log in.
Potential impact on your site
Complete compromise of the site: attackers can steal data, modify content, inject malware, or take the site offline.
Conditions required to exploit
None. The attacker needs only network access to the site.
Key dates
External resources
Related vulnerabilities
