CVE-2021-24212
Assigner: WPScan
Published: 2021-04-05T18:27:47
State: PUBLISHED
affected: product: WooCommerce Help Scout
vendor: Unknown
versions: lessThan: 2.9.1
status: affected
version: 2.9.1
versionType: custom
credits: value: Ville Korhonen / Seravo
descriptions: value: The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp.
problemTypes: descriptions: cweId: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
type: CWE
source: discovery: UNKNOWN
title: WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE
x_generator: WPScan CVE Generator