CVE-2022-38140

Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.
Configurations

Configuration 1 (hide)

cpe:2.3:a:squirrly:seo_plugin_by_squirrly_seo:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 07:15

Type Values Removed Values Added
References () https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-seo-plugin-by-squirrly-seo-plugin-12-1-10-auth-arbitrary-file-upload-vulnerability?_s_id=cve - Third Party Advisory () https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-seo-plugin-by-squirrly-seo-plugin-12-1-10-auth-arbitrary-file-upload-vulnerability?_s_id=cve - Third Party Advisory
CVSS v2 : unknown
v3 : 8.8
v2 : unknown
v3 : 7.6

07 Nov 2023, 03:50

Type Values Removed Values Added
Summary Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress. Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.

Information

Published : 2022-11-28 20:15

Updated : 2024-11-21 07:15


NVD link : CVE-2022-38140

Mitre link : CVE-2022-38140

CVE.ORG link : CVE-2022-38140


JSON object : View

Products Affected

squirrly

  • seo_plugin_by_squirrly_seo
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type