Unrated severityNVD Advisory· Published Mar 18, 2021· Updated Aug 3, 2024
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
CVE-2021-24123
Description
Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<8.3.8+ 1 more
- (no CPE)range: <8.3.8
- (no CPE)range: 8.3.8
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/43aa30bf-eaf8-467a-93a1-78f9bdb37b36mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.