Vulnerabilities > CVE-2021-24563 - Unspecified vulnerability in Frontend Uploader Project Frontend Uploader 0.9.2/1.3.2

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
frontend-uploader-project
NVD
Published: 2021-10-11
Updated: 2024-11-21

Summary

The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly

Vulnerable Configurations

Part Description Count
Application
Frontend_Uploader_Project
3

References