Contus Video Gallery <= 1.3 - Arbitrary File Upload
criticalThe Contus Video Gallery plugin for WordPress is vulnerable to Arbitrary File Upload due to missing file type validation via the upload1.php file in versions up to, and including, 1.3. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possib...
- CVSS:
- 9.8
- Affected:
- up to 1.3
- Fix:
- No patched version reported
- Disclosed:
- Jun 12, 2012