Threats tagged 'ghsa-qj2m-6jmm-rjxw'

The BuddyBoss App plugin for WordPress contains an arbitrary file upload vulnerability in all versions up to and including 3.2.1. This flaw arises from insufficient server-side validation of uploaded files, relying only on the client-supplied Content-Type header. Authenticated users with subscriber-level access or higher can exploit this to upload potentially executable files, enabling remote code execution. Uploaded files are typically deleted after email transmission, but a race condition during SMTP execution allows access to these files. Additionally, files persist indefinitely if the wp_mail() function fails.