CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in blubrry PowerPress Podcasting powerpress allows Upload a Web Shell to a Web Server.This issue affects PowerPress Podcasting: from n/a through <= 11.12.5.
Explanation of Vulnerability in Simple Terms
PowerPress Podcasting versions up to 11.12.5 allow authenticated users to upload files without proper validation. An attacker with low-level site access can upload malicious files, potentially gaining control of the entire site. The vulnerability affects confidentiality, integrity, and availability. Update to a version newer than 11.12.5.
What an attacker can do
Upload malicious files and run code on the site with full control over data and functionality.
Potential impact on your site
Any user with upload permissions can compromise your entire site, including database access and file system control.
Conditions required to exploit
Attacker needs a low-privilege user account (e.g., contributor or subscriber role) on the site.
Key dates
External resources
