4 matches found
CVE-2021-24222
The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the formCadastro is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction,...
CVE-2021-24222
The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the formCadastro is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction,...
PT-2021-15766
Name of the Vulnerable Software and Affected Versions: WP-Curriculo Vitae Free WordPress plugin versions 6.3 and earlier Description: The issue allows unauthenticated users to upload arbitrary files, including those that can lead to remote code execution RCE, due to a lack of file extension...
CVE-2021-24222: Unrestricted Upload of File with Dangerous Type
The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the formCadastro is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction,...