Security Advisory

CVE-2022-0687

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-21 18:55:57

Last updated 2024-08-02 23:40:03

Assigner WPScan

State PUBLISHED

Description

The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role.

← Browse all CVEs View on cve.org ↗