CVE-2023-45603

概要

参考情報

• patchstack.com/database/vulnerability/user-submitted-posts/wordpress-user-submitted-posts-plugin-20230902-unauthenticated-arbitrary-file-upload-vulnerability · Third Party Advisory

user submitted posts のその他の脆弱性

• CVE-2024-5002中 4.8The User Submitted Posts WordPress plugin before 20240516 does not sanitise and escape some of its settings, which could allow high privile…
• CVE-2023-4779中 5.4The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [usp_gallery] shortcode in versi…
• CVE-2023-4308中 5.4The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-content’ parameter in ver…
• CVE-2019-25138緊急 9.8The User Submitted Posts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the usp_check_i…
• CVE-2016-11001中 6.1The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.