CVE-2023-4311
Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode.
Affected products
Unknown · Vrm 360 3D Model ViewerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →