Aller au contenu
Se connecter
9.1 Critique

CVE-2024-8673 The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of…

Description

The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.

Produits et versions touchés

Produit Versions touchées Corrigé en
Z-Downloads 1.11 premières → < 1.11.7 1.11.7

Autres CVE de Z-Downloads

Les 3 CVE de Z-Downloads →
CVE-2024-8703 The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in… 6.1 Moyenne CVE-2024-8699 The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege… 7.2 Élevée
Suivre cette CVE