PT-2024-23277 · Webtoffee · Product Import Export For Woocommerce
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Product Import Export for WooCommerce versions n/a through 2.4.1
Description
The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WebToffee Product Import Export for WooCommerce.
Recommendations
For versions n/a through 2.4.1, update to a version later than 2.4.1 to resolve the issue.
As a temporary workaround, consider restricting file uploads to prevent exploitation until a patch is available.
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Product Import Export For Woocommerce