admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-4300.md
0xMarcio 4edef1e4c8 Update CVE sources 2024-05-28 08:49
2024-05-28 08:49:17 +00:00

805 B
Raw Permalink Blame History

CVE-2023-4300

Description

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

POC

Reference

Github

No PoCs found on GitHub currently.