Threats tagged 'ghsa-h4mh-crg2-gffw'

The Contest Gallery WordPress plugin versions before 34.0.3 contain a vulnerability in the e-commerce sale file-replacement feature where file names are not properly sanitized. Authenticated users with Author-level access or higher can upload files with arbitrary names and extensions to a web-accessible directory. By overwriting the directory's protection file, these users can achieve remote code execution on the server.