CVE-2023-5931
EUVD-2023-5820326.12.2023, 19:15
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the serverEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| rtcamp | rtmedia | 𝑥 < 4.6.16 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration