Threats tagged 'ghsa-5ph3-fc6c-c54j'

The CM Map Locations WordPress plugin (up to version 2.1.8) contains an unrestricted file upload vulnerability due to insufficient validation of uploaded files. Authenticated users with subscriber-level access or higher can upload potentially executable files because the upload handler lacks proper MIME-type checks and relies only on incomplete extension filtering. This vulnerability enables remote code execution. The required nonce for upload is accessible to any logged-in subscriber via a JavaScript object on the front-end editor page.