GHSA-58qj-rr2r-8rmmHighCVSS 7.2
The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file...
🔗 CVE IDs covered (1)
📋 Description
The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution.