Jupiter X Core Premium < 3.3.8 - Unauthenticated Arbitrary File Upload

2023-08-2400:00:00

wpscan.com

jupiterxcorepremium

unauthenticated

fileupload

arbitraryfiles

securityvulnerability

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not validate files to be uploaded via the raven_form_frontend AJAX action available to unauthenticated users, allowing them to upload arbitrary files on the server

CPENameOperatorVersion
eq3.3.8

CPE	Name	Operator	Version
		eq	3.3.8

References

patchstack.com/articles/critical-vulnerabilities-patched-in-jupiter-x-core-plugin/