CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in wordwebsoftware Crossword Compiler Puzzles crossword-compiler-puzzles allows Upload a Web Shell to a Web Server.This issue affects Crossword Compiler Puzzles: from n/a through <= 5.2.
Explanation of Vulnerability in Simple Terms
Crossword Compiler Puzzles versions 5.2 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files that may execute on the server or be accessed by other users. The vulnerability affects confidentiality, integrity, and availability of the affected system.
What an attacker can do
Upload malicious files to the server and potentially execute code or access sensitive data.
Potential impact on your site
Compromised sites may experience data theft, malware injection, or complete system takeover if exploited.
Conditions required to exploit
Attacker must have a low-privilege user account on the system.
Key dates
External resources
