Media File Organizer <= 1.0.1 - Directory Traversal
highDirectory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.
- CVSS:
- 8.6
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
- Disclosed:
- Apr 13, 2021