Lazy Seo · Lazy Seo · CVE-2013-5961
**Name of the Vulnerable Software and Affected Versions**
Lazy SEO plugin version 1.1.9
**Description**
The issue allows remote attackers to execute arbitrary PHP code by uploading a PHP file and then accessing it via a direct request. This is due to an unrestricted file upload vulnerability in the lazyseo.php file.
**Recommendations**
For version 1.1.9, update to a newer version that contains a fix for this issue, as the current version allows unrestricted file uploads that can be exploited to execute arbitrary PHP code.