Filtered by vendor Classyfrieds Project Subscriptions
Filtered by product Classyfrieds Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24253 1 Classyfrieds Project 1 Classyfrieds 2024-08-03 8.8 High
The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.