CVE-2024-4620

Description

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form

Problem types

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Credits

mgthuramoemyint 0x4005c2adb0

WPScan 0x4005c2adc0

References

https://wpscan.com/vulnerability/dc34dc2d-d5a1-4e28-8507-33f659ead647/ exploit vdb-entry technical-description

cve.org CVE-2024-4620

nvd.nist.gov CVE-2024-4620

Download JSON