CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector acf-city-selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through <= 1.14.0.
Explanation of Vulnerability in Simple Terms
ACF City Selector versions 1.14.0 and earlier allow authenticated administrators to upload files without proper validation. An attacker with admin privileges can upload malicious files that may affect the site's confidentiality, integrity, or availability. The vulnerability requires high-level access and does not require user interaction.
What an attacker can do
Upload files without validation to compromise site confidentiality, integrity, or availability.
Potential impact on your site
An admin account compromise could allow file uploads that damage site security or functionality.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
Related vulnerabilities
