CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post convert-docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through <= 1.4.
Explanation of Vulnerability in Simple Terms
Convert Docx2post versions 1.4 and earlier allow authenticated administrators to upload files without proper validation. An attacker with admin privileges can upload malicious files that may compromise the site's integrity, confidentiality, and availability. The vulnerability affects the file upload mechanism and can impact the entire system due to scope change.
What an attacker can do
Upload malicious files to the site and execute arbitrary code or modify site content.
Potential impact on your site
A compromised admin account can lead to full site takeover, data theft, or malware injection.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
Related vulnerabilities
