9.0
Critical
CVE-2025-23921 Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in sh1zen Multi Uploader for Gravity Forms gf-multi-uploader allows Upload a Web Shell to a Web Server.This issue affects Multi Uploader for Gravity Forms: from n/a through <= 1.1.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Multi Uploader for Gravity Forms 1.1 | earliest → 1.1.3 | No fix stated |
| Multi Uploader for Gravity Forms 1.1 | earliest → 1.1.3 | No fix stated |