Unrestricted File Upload Vulnerability Affects Zita Elementor Site Library
CVE-2024-37420

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
Zita Elementor Site Library
Vendor
CVE Published:
9 July 2024

What is CVE-2024-37420?

The Zita Elementor Site Library by WPZita is vulnerable to an unrestricted file upload issue, allowing attackers to upload files of dangerous types, such as web shells, to the server. This can lead to arbitrary code execution and significant security breaches. The vulnerability affects versions from n/a to 1.6.1, emphasizing the need for immediate attention to ensure that user environments remain secure.

Affected Version(s)

Zita Elementor Site Library <= 1.6.1

References

https://patchstack.com/database/vulnerability/zita-site-l...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

Credit

Majed Refaea (Patchstack Alliance)
.