Threats tagged 'ghsa-r27v-88r8-fhq6'

The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress contains an arbitrary file upload vulnerability in all versions up to and including 2.13.2. This flaw allows unauthenticated attackers to upload and write PHP files to arbitrary locations outside the uploads directory, resulting in remote code execution. Exploitation requires the site option 'nbdesigner_upload_popup_style' to be set to 'a' (Advanced Upload Popup), which enables unauthenticated access to the vulnerable AJAX handler. The required nonce for the attack is publicly accessible on the frontend, making exploitation trivial once the configuration is active.