CVE-2023-2751

Upload Resume <= 1.2.0 - Captcha Bypass

Medium · published June 19, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Published
2023-06-19T10:52Z
EPSS history
Timeline
  • 19 JUN 10:52Z
    Upload Resume <= 1.2.0 - Captcha Bypass
    cvelistv5