CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through <= 1.2.9.
Explanation of Vulnerability in Simple Terms
ThemeEgg ToolKit versions up to 1.2.9 allow authenticated administrators to upload files without proper validation. An attacker with admin access can upload malicious files to compromise the site. The vulnerability affects confidentiality, integrity, and availability. Update to a version newer than 1.2.9 to resolve this issue.
What an attacker can do
Upload malicious files to the site and execute code or modify site content.
Potential impact on your site
A compromised admin account can upload files that execute code, steal data, or deface your site.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
Related vulnerabilities
