admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 18:27:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-1777.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

943 B
Raw Permalink Blame History

CVE-2022-1777

Description

The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard. This could allow them to upload arbitrary HTML files as well as delete all files or arbitrary ones.

POC

Reference

Github

No PoCs found on GitHub currently.