CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Fahad Mahmood Easy Upload Files During Checkout easy-upload-files-during-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Upload Files During Checkout: from n/a through <= 3.0.0.
Explanation of Vulnerability in Simple Terms
Easy Upload Files During Checkout versions 3.0.0 and earlier lack proper authorization checks on file upload functionality. An authenticated user with low privileges can upload files without proper validation, potentially modifying site content or injecting malicious files. The vulnerability requires an active user account but no special permissions.
What an attacker can do
Upload files to the site without proper authorization checks.
Potential impact on your site
Unauthorized users can upload files, risking malicious content injection or site defacement.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
