Simple Schools Staff Directory Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Simple Schools Staff Directory Project records in CISA KEV

No Simple Schools Staff Directory Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Schools Staff Directory 1 record LOW

Records

1 record

TI-2021-06945 CVE-2021-24663 · GHSA-gg8c-wv43-x28x

Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File Upload

LOW 35

The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, le…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0149 Published 2021-09-20 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0