CVE-2021-24370

The CVE-2021-24370 issue affects the WordPress plugin Fancy Product Designer prior to version 4.6.9 . It allows unauthenticated arbitrary file upload , which can lead to remote code execution on the server. Multiple connected documents corroborate an arbitrary-file-upload path and RCE vector, wit...

CVE-2021-24370 Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution...