PT-2024-33628
CVE-2024-49676
·
تاريخ النشر
2024-10-23
·
تاريخ التحديث
2024-10-25
الوصف من
CVSS 3.1
6.6
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Custom Icons for Elementor versions 0.3.3 and earlier
Description
The issue allows for the unrestricted upload of files with dangerous types, which can lead to uploading a web shell to a web server.
Recommendations
For versions 0.3.3 and earlier, update to a version that contains a fix for this issue, as the current version allows for the upload of malicious files.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾