PT-2025-26832 · Unknown · Zoomsounds
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
ZoomSounds plugin versions prior to 6.05
Description:
The issue allows unauthenticated users to upload an arbitrary file anywhere on the web server due to a vulnerable PHP file.
Recommendations:
For versions prior to 6.05, update to version 6.05 or later to resolve the issue.
Exploit
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zoomsounds