Threats tagged 'ghsa-p5jp-hfvm-27gp'

A vulnerability in the Gravity Forms WordPress plugin before version 3.2.2 allows unauthenticated users to upload files without proper file type restrictions via its chunked file upload feature. This flaw can lead to unauthorized reading of server environment variables and file contents within the web root on servers configured to parse Server-Side Include (SSI) documents, such as Apache with SSI enabled.