CVE-2022-1952exploração observadaCWE-434

CVE-2022-1952: falha em Free Booking Plugin for Hotels, Restaurant and…

eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

45Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actepss 25%
da publicação à arma
Publicada no NVD11 de jul.
VulnCheck+560d
The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.
Produtos afetados
Unknown · Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC