Threats tagged 'ghsa-x4h2-h25g-wwc2'

The Avada Website Builder theme for WordPress and WooCommerce is vulnerable to an arbitrary file upload flaw in versions up to and including 7.16.2. The vulnerability arises from insufficient file type validation in the convert_palette_images_to_truecolor() function, allowing unauthenticated attackers to upload potentially executable files. This can lead to remote code execution on affected systems.