← CVE Intelligence

CVE-2024-3112

Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload PUBLISHED

Description (CNA)

The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Affected (CNA)

Vendor / productVersions
Unknown / Quotes and Tips by BestWebSoftaffected 0 before 1.45

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.