Security Advisory

CVE-2020-24186

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-08-24 13:02:04

Last updated 2024-08-04 15:05:11

Assigner mitre

CVSS score 10.0

State PUBLISHED

Description

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.

← Browse all CVEs View on cve.org ↗