PT-2019-14445

Name of the Vulnerable Software and Affected Versions crelly-slider plugin versions prior to 1.3.5 Description The issue allows for arbitrary file upload through a PHP file inside a ZIP archive to the wp ajax crellyslider importSlider endpoint. This can be exploited by uploading malicious files...