Security Advisory

CVE-2021-24248

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-05 18:39:43
Last updated 2024-08-03 19:21:18
Assigner WPScan
State PUBLISHED

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE