CVE-2024-32809 WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability

2024-05-1709:39:22

CWE-434

Patchstack

raw.githubusercontent.com

cve-2024-32809

unrestricted file upload

dangerous file type

jumpdemand inc.

9.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Files.This issue affects ActiveDEMAND: from n/a through 0.2.41.