Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-3112

Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload

Description

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Quotes and Tips by BestWebSoft

Default version status: unaffected

  • 0 to < 1.45affected

References