WordPress AIT CSV Import Export - Unauthenticated Remote Code Execution
The AIT CSV Import/Export plugin <= 3.0.3 allows unauthenticated remote attackers to upload and execute arbitrary PHP code. The upload-handler does not require authentication, nor validates the uploaded content.
ait-csv-import-exportPoC 已收录
CVSS9.8