CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Agile Logix Store Locator WordPress agile-store-locator allows Upload a Web Shell to a Web Server.This issue affects Store Locator WordPress: from n/a through <= 1.5.2.
Explanation of Vulnerability in Simple Terms
The Store Locator plugin for WordPress contains an unrestricted file upload vulnerability affecting versions up to 1.5.2. An authenticated administrator can upload files without proper validation, potentially allowing them to upload malicious files to the server. The vulnerability has limited scope but can affect site integrity and confidentiality. Update to a version newer than 1.5.2 to resolve this issue.
What an attacker can do
Upload files to the server without proper validation, potentially including malicious code.
Potential impact on your site
A compromised admin account could upload malicious files, affecting site integrity and data security.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
