Threats tagged 'ghsa-v95p-x24p-5c2m'

The Contact Form 7 WordPress plugin versions before 6.2.4 contain a vulnerability where the plugin does not validate the type or extension of files uploaded through form file fields. Additionally, a flaw in the temporary-file cleanup process leaves uploaded files on disk. This allows unauthenticated users to upload arbitrary files to the site. On certain server configurations, such as stock Debian or Ubuntu Apache setups that list directory contents and map .phar files to the PHP handler, this can lead to remote code execution. On other configurations, including nginx and Apache with .htaccess overrides, the impact is limited to arbitrary files being written to the uploads directory, which may still be served as active content like HTML or SVG from the site's origin.