CVE-2021-24493CWE-434

CVE-2021-24493: fallo en Shopp

Shopp eCommerce <= 1.4 - Unauthenticated Arbitrary File Upload

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Shopp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 2.0%
The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such as PHP, allowing unauthenticated users to upload arbitrary files and leading to RCE
Productos afectados
Unknown · Shopp