Classyfrieds Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Classyfrieds Project records in CISA KEV

No Classyfrieds Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Classyfrieds 1 record MEDIUM

Records

1 record in Classyfrieds · all components

TI-2021-06545 CVE-2021-24253 · GHSA-rrx2-h7gv-6jx5

Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE

MEDIUM 42

The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01906 Published 2021-05-05 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0