CVE-2012-3578

The CVE covers an unrestricted file upload in the FCChat Widget WordPress plugin (versions up to 2.2.13.1). The vulnerability resides in html/Upload.php, where an attacker can upload a file with an executable extension followed by a safe extension and then access it directly under html/images, en...