Threats tagged 'ghsa-x6g9-3pp8-wfxp'

The Hotel Booking Lite plugin (up to version 2.5.1) contains an unrestricted file upload vulnerability that allows attackers with limited privileges to upload files with dangerous types, such as web shells, to the web server. This vulnerability can lead to complete compromise of the affected system.