Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF
Vulnerability Description
The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
WordPress plugin Sermon Browser 代码问题漏洞
Vulnerability Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是WordPress开源的一个应用插件。 WordPress plugin Sermon Browser 0.45.22 版本开始存在代码问题漏洞，该漏洞源于上传 Sermon 文件时没有进行 CSRF 检查，也不会以任何方式验证它们。攻击者可以让登录的管理员上传任意文件，例如 PHP 文件。
CVSS Information
N/A
Vulnerability Type
N/A