Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2024-28890

CVSS 3.1
5.3 medium
EPSS
<1%p51
Published
·
Modified
Analyze CVE-2024-28890 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

Vendors
incsub
Products
forminator
Weakness
CWE-434
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

2 stories