Security Advisory

CVE-2023-2751

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-06-19 10:52:52

Last updated 2024-12-11 20:42:41

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site.

← Browse all CVEs View on cve.org ↗