CVE-2020-7055

2020-04-2217:02:49

mitre

www.cve.org

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.1%

JSON

An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.

References

pentest.co.uk/labs/advisory/cve-2020-7055/

pentest.co.uk/labs/vulnerability-disclosure-cve-2020-7055/