CVE-2023-23970

CVE-2023-23970 affects WooRockets Corsa (WordPress Corsa Theme) up to version 1.5, enabling an Unrestricted Upload of File with Dangerous Type . Root cause: inadequate validation of uploaded files leading to arbitrary file uploads. Impact stated as high/critical in multiple sources; affected scop...