Paper/Archive/CVE-2024-9659

CVE-2024-9659

dasinfomedia School Management System for Wordpress — School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 76.6.766 × 2015.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_user_avatar_image_upload() function in all versions up to, and including, 91.5.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected

ProductAffectedFixed inSource

School Management System for Wordpress≤ 91.5.0–CNA

school_management_system≤ 91.5.0–CISA-ADP

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/ff1f303f-17fc-4006-b21b-5846216995da?source=cve refcodecanyon.net/item/school-management-system-for-wordpress/11470032