CVE-2024-5807: falha de alta gravidade em Business Card
Business Card <= 1.0.0 - Admin+ File Upload
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.6%
The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Unknown · Business CardCVEs relacionadas — Business Card
No mesmo produto, das mais perigosas para as menos.
CVE-2024-4532MEDIUMBusiness Card <= 1.0.0 - Arbitrary Card Deletion via CSRFEPSS 0.3%CVE-2024-4531HIGHBusiness Card <= 1.0.0 - Card Edit via CSRFEPSS 0.3%CVE-2024-4530MEDIUMBusiness Card <= 1.0.0 - Category Edit via CSRFEPSS 0.2%CVE-2024-4529MEDIUMBusiness Card <= 1.0.0 - Category Deletion via CSRFEPSS 0.2%