Lucene search

K
patchstackKacper SzurekPATCHSTACK:DC63494742B63F6DDBDC3F250298DFC0
HistoryJan 08, 2015 - 12:00 a.m.

WordPress Shopping Cart Plugin 3.0.4 - Unrestricted File Upload

2015-01-0800:00:00
Kacper Szurek
patchstack.com
6

0.923 High

EPSS

Percentile

99.0%

Shopping Cart plugin is prone to an unrestricted file upload vulnerability. Because of incorrect if statement inside β€œbanneruploaderscript.php”, any registered user can upload any file.

Solution

           Upgrade the plugin. 
CPENameOperatorVersion
shopping cartle3.0.4

0.923 High

EPSS

Percentile

99.0%