CVE-2024-9660

Description

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load_documets_new() and mj_smgt_load_documets() functions in all versions up to, and including, 91.5.0. This makes it possible for authenticated attackers, with Student-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

Reserved 2024-10-08 | Published 2024-11-23 | Updated 2024-11-26 | Assigner Wordfence

Problem types

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Default status
unaffected

*
affected

Timeline

2024-11-22:

Disclosed

Credits

Tonn finder

References

www.wordfence.com/...-7573-466e-883e-8d26f243c4d0?source=cve

codecanyon.net/...l-management-system-for-wordpress/11470032

cve.org (CVE-2024-9660)

nvd.nist.gov (CVE-2024-9660)

Download JSON