CVE-2024-28890

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability

Medium · published April 23, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00708 · 52.9th percentile
Published
2024-04-23T04:56Z
EPSS history
Timeline
  • 23 APR 04:56Z
    Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability
    cvelistv5