Threats tagged 'ghsa-gfc3-vp5h-pp8w'

The Contact Manager plugin for WordPress up to version 9.1.2 contains an arbitrary file upload vulnerability via the add_message function. This flaw arises from an incomplete file extension blacklist that can be bypassed using a trailing dot, causing dangerous file types to be uploaded. An unauthenticated attacker can exploit this to upload potentially executable files, enabling remote code execution on servers running Apache with libapache2-mod-php. The exploit requires the attacker to access the uploaded file before it is deleted at the end of the request.