Lucene search
PRIOn knowledge basePRION:CVE-2023-0924HistoryMay 02, 2023 - 8:15 a.m.
Design/Logic Flaw
2023-05-0208:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress plugin
security flaw
file upload
validation
high privileged user
administrator
file system
multisite install
The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged user (such as an Administrator) to upload arbitrary files, even when modifying the file system is disallowed, such as in a multisite install.
Related
cve
cve
CVE-2023-0924
2023-05-02 08:15:09
wpvulndb
wpvulndb
Zyrex Popup < 1.1 - Admin+ Arbitrary File Upload
2023-04-04 00:00:00
nvd
nvd
CVE-2023-0924
2023-05-02 08:15:09
cvelist
cvelist
CVE-2023-0924 Zyrex Popup <= 1.0 - Admin+ Arbitrary File Upload
2023-05-02 07:04:48
wpexploit
wpexploit
Zyrex Popup < 1.1 - Admin+ Arbitrary File Upload
2023-04-04 00:00:00
wordfence
wordfence