PT-2018-4581

Name of the Vulnerable Software and Affected Versions videowhisper-video-presentation plugin version 3.31.17 Description The issue allows remote attackers to execute arbitrary code. This is because the vp/vw upload.php file considers a file safe when it ends with "html", as demonstrated by a .pht...