An arbitrary file upload vulnerability in the Gravity Forms WordPress plugin (<= 3.0.2) allows unauthenticated attackers to write arbitrary files to the temporary upload directory, potentially leading to remote code execution or stored XSS.
Gravity Forms +1
wordpress
vulnerability
rce
xss
application-security
1r
3t
1c
updated