{
"id": "CVE-2023-28409",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2023-05-23T02:15:10.257",
"lastModified": "2023-05-23T13:04:30.710",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
"lang": "en",
"value": "Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file."
}
],
"metrics": {},
"references": [
"url": "https://jvn.jp/en/jp/JVN01093915/",
"source": "vultures@jpcert.or.jp"
},
"url": "https://plugins.2inc.org/mw-wp-form/blog/2023/05/08/752/",
]