CVE-2021-24253

The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WPScanCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
classyfrieds_projectclassyfrieds
𝑥
≤ 3.8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md
https://wpscan.com/vulnerability/ee42c233-0ff6-4b27-a5ec-ad3246bef079
https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md
https://wpscan.com/vulnerability/ee42c233-0ff6-4b27-a5ec-ad3246bef079