admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-3418.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

883 B
Raw Blame History

CVE-2022-3418

Description

The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files

POC

Reference

Github

No PoCs found on GitHub currently.