Threats tagged 'ghsa-7rh5-mv9f-p27q'

The Cloud Storage Manager for Fluent Forms WordPress plugin (up to version 1.2.0) contains an arbitrary file write vulnerability due to missing authorization checks and insufficient path validation in Google Drive file handling. This flaw allows unauthenticated attackers to write files outside the intended directory, potentially leading to remote code execution if a PHP file is written to a web-accessible location.