Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4300
HistorySep 25, 2023 - 4:15 p.m.

Remote code execution

2023-09-2516:15:00
PRIOn knowledge base
www.prio-n.com
4
remote code execution
import xml
rss feeds
wordpress
plugin
vulnerability

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

CPENameOperatorVersion
import_xml_and_rss_feedslt2.1.4

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

Related for PRION:CVE-2023-4300