PT-2023-31839 · WordPress · Ioss Wp Mlm Software Plugin
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WP MLM SOFTWARE PLUGIN versions n/a through 4.0
Description
The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in the IOSS WP MLM SOFTWARE PLUGIN. This allows for the upload of files with potentially dangerous types, which could lead to security issues.
Recommendations
For versions n/a through 4.0, update to a version later than 4.0 to resolve the issue.
As a temporary workaround, consider restricting file uploads to only necessary and safe file types until a patch is available.
Restrict access to the file upload functionality to minimize the risk of exploitation.
Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ioss Wp Mlm Software Plugin