National Cyber Warfare Foundation (NCWF)

National Cyber Warfare Foundation (NCWF) Forums

CVE-2023-4666 (form_maker)

0 user ratings

2023-10-20 18:14:31
milo
CVEs
- archive --

The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE

CVE-2023-4666 (form_maker)
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4666
The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE
2023-10-16T20:15:15Z

Source: CVEAnnouncements
Source Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4666

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

CVEs

National Cyber Warfare Foundation (NCWF) Forums

CVE-2023-4666 (form_maker)

Comments