漏洞标题
UpThemes主题设计作品集Plus无限制上传
漏洞描述信息
**分配时不受支持** 已在WordPress上的UpThemes Theme DesignFolio Plus 1.2中发现一个漏洞,被分类为问题严重。受影响的是未知功能。该操作会导致无限制的文件上传。攻击可以远程发起。该利用已公开披露,可能已被利用。补丁的标识符为53f6ae62878076f99718e5feb589928e83c879a9。建议应用补丁以解决此问题。该漏洞的标识符为VDB-221809。注意:此漏洞仅影响维护者不再支持的产品。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
UpThemes Theme DesignFolio Plus unrestricted upload
漏洞描述信息
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 53f6ae62878076f99718e5feb589928e83c879a9. It is recommended to apply a patch to fix this issue. The identifier VDB-221809 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
漏洞类别
危险类型文件的不加限制上传
漏洞标题
UpThemes Theme DesignFolio Plus 代码问题漏洞
漏洞描述信息
UpThemes Theme DesignFolio Plus是UpThemes公司的一个 WordPress 插件。 UpThemes Theme DesignFolio Plus 1.2版本存在代码问题漏洞,该漏洞源于存在不受限制的上传漏洞。
CVSS信息
N/A
漏洞类别
代码问题