CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
KiotViet Sync versions 1.8.5 and earlier allow unauthenticated attackers to upload arbitrary files to the server over the network without user interaction. An attacker can exploit this to run their own code on the site, read sensitive data, or disrupt service. No authentication or special configuration is required.
What an attacker can do
Upload arbitrary files and run code on the server without authentication.
Potential impact on your site
Complete compromise of the site: attackers can execute code, steal data, or take the site offline.
Conditions required to exploit
Network access to the affected KiotViet Sync instance; no authentication required.
Key dates
External resources
