Vulnerabilities > CVE-2021-24224 - Unspecified vulnerability in Easy-Form-Builder-By-Bitware Project Easy-Form-Builder-By-Bitware 1.0

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
easy-form-builder-by-bitware-project
NVD
Published: 2021-04-12
Updated: 2024-11-21

Summary

The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE.

Vulnerable Configurations

Part Description Count
Application
Easy-Form-Builder-By-Bitware_Project
2

References