CVE-2020-12800

The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .php% file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_-_contact_form_7:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2020-06-08 17:15

Updated : 2024-02-28 17:47


NVD link : CVE-2020-12800

Mitre link : CVE-2020-12800

CVE.ORG link : CVE-2020-12800


JSON object : View

Products Affected

codedropz

  • drag_and_drop_multiple_file_upload_-_contact_form_7
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type