9.8
Critique
CVE-2022-27862 Arbitrary File Upload leading to RCE in E4J s.r.l
Description
Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and execute dangerous file types (e.g. PHP shell) via the signature upload on the booking form.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VikBooking Hotel Booking Engine & PMS (WordPress plugin) 1.5 | premières → 1.5.3 | Pas de correctif indiqué |