← CVE Intelligence

CVE-2022-2381

E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF PUBLISHED

Description (CNA)

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / E Unlocked – Student Resultaffected 1.0.4 through 1.0.4

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.