Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24253

Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Classyfrieds

  • 3.8 to ≤ 3.8affected

References