Non notée
CVE-2021-24770 The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX…
Description
The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbitrary images.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Stylish Price List 6.9 | premières → < 6.9.1 | 6.9.1 |
Autres CVE de Stylish Price List
Les 4 CVE de Stylish Price List →
CVE-2024-7758
The Stylish Price List WordPress plugin before 7.1.8 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2024-10472
The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could…
5.9
Moyenne
CVE-2021-24757
The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX…
Non notée