TI-2022-02197 CVE-2022-2381 · GHSA-pgvw-9q7p-5vwxE Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRFPriority LOW 39The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via…CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00531 · Published 2022-08-15 · No fix listed CWE-352