HOMEVULNERABILITIESVENDORSN5 Upload Form Project

N5 Upload Form ProjectCVEs & Vulnerabilities

1 CVEs affecting N5 Upload Form Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

n5 upload form 1
CVE-2021-24223CRITICAL

The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory listing enabled, accessing it is trivial.

12 Apr 2021
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
N5 Upload Form Project CVEs & Vulnerabilities — 1 Tracked