Security Advisory

CVE-2021-24240

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-22 21:00:51
Last updated 2024-08-03 19:21:18
Assigner WPScan
State PUBLISHED

Description

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.