WP-Curricul Vitea Free <= 6.3 - Unauthenticated Arbitrary File Upload to RCE
Description
The plugin suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE.
Proof of Concept
The PoC will be displayed once the issue has been remediated
Affects Plugins
No known fix - plugin closed
Classification
Type
UPLOAD
CWE
Miscellaneous
Original Researcher
Jin Huang
Submitter
Jin Huang
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2021-03-26 (about 7 months ago)
Added
2021-03-26 (about 7 months ago)
Last Updated
2021-04-01 (about 6 months ago)