CVE-2024-52380

Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web Shell to a Web Server.This issue affects Picsmize: from n/a through = 1.0.0...

CVE-2024-52380

creationtimestamp| type| source ---|---|--- 2024-11-14 20:00:42+00:00| seen| https://t.me/cvedetector/10990 2025-01-06 20:20:26+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113783264112187910 2025-01-18 10:00:06+00:00| published-proof-of-concept|...

CVE-2024-52380

CVE-2024-52380 pertains to the WordPress plugin Picsmize by Softpulse Infotech. The connected sources confirm an Unrestricted Upload of File with Dangerous Type vulnerability affecting Picsmize versions up to 1.0.0, enabling an attacker to upload a web shell to the target server and potentially a...

WordPress Picsmize Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

Software Picsmize Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52380 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 741a66180c37 Credits stealthcopter Required privilege Unauthenticated...