PT-2022-26211 · Unknown · Wedding Planner

CVE-2022-42034

Published

2022-10-11

Updated

2022-10-11

CVSS v3.1

8.8

High

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wedding Planner version 1.0

Description The issue allows for arbitrary code execution via the users profile.php file.

Recommendations For Wedding Planner version 1.0, consider restricting access to the users profile.php file until a patch is available.

Exploit

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-42034

Wedding Planner