An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-04-22T17:02:49
Updated: 2024-08-04T09:18:02.876Z
Reserved: 2020-01-14T00:00:00
Link: CVE-2020-7055
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-04-22T18:15:11.350
Modified: 2020-08-25T12:36:07.910
Link: CVE-2020-7055
Redhat
No data.