CVE-2022-4949

CVE-2022-4949 affects the AdSanity WordPress plugin. The vulnerability stems from missing file type validation in the ajax_upload function, vulnerable through versions up to and including 1.8.1. An authenticated attacker with Contributor+ privileges can upload arbitrary files to the server, which...