admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-31 10:40:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-6823.md
0xMarcio a8969e1323 Update CVE sources 2024-08-14 18:26
2024-08-14 18:26:11 +00:00

1.0 KiB
Raw Blame History

CVE-2024-6823

Description

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline-edit-upload-scripts AJAX action in all versions up to, and including, 3.18. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

POC

Reference

No PoCs from references.

Github