CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms gf-multi-uploader allows Upload a Web Shell to a Web Server.This issue affects Multi Uploader for Gravity Forms: from n/a through <= 1.1.3.
Explanation of Vulnerability in Simple Terms
Multi Uploader for Gravity Forms versions 1.1.3 and earlier allow unauthenticated attackers to upload arbitrary files to the site. The vulnerability requires specific conditions to exploit but can lead to complete compromise of the site, including data theft, modification, and service disruption. Site administrators should update immediately to a patched version.
What an attacker can do
Upload arbitrary files to the site without authentication, potentially executing code or stealing data.
Potential impact on your site
Attackers can upload malicious files, run code on your site, steal data, or take the site offline.
Conditions required to exploit
Network access to the site; specific attack complexity conditions must be met.
Key dates
External resources
Related vulnerabilities
