← CVE Intelligence

CVE-2022-0499

Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF PUBLISHED

Description (CNA)

The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones.

Affected (CNA)

Vendor / productVersions
Unknown / Sermon Browseraffected 0.45.22 through 0.45.22

CWE

CWE-434, CWE-352

References

ADP enrichment

CVE

No English description supplied.