CVE-2022-0888

Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

CVSS 9.8 CRITICALEPSS 39.4%CWE-434

Vexday Risk Score

40Attention

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 39.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

23 Mar 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

SaturdayDrive · Ninja Forms - File Uploads

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://gist.github.com/Xib3rR4dAr/5f0accbbfdee279c68ed144da9cd8607 https://www.wordfence.com/threat-intel/vulnerabilities/id/f00eeaef-f277-481f-9e18-bf1ced0015a0?source=cve https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0888