Skip to content
Threat Feed

Tag

CVE-2020-37227

1 brief RSS
high threat

HS Brand Logo Slider 2.1 Unrestricted File Upload Vulnerability (CVE-2020-37227)

HS Brand Logo Slider version 2.1 contains an unrestricted file upload vulnerability (CVE-2020-37227) allowing authenticated users to bypass client-side validation and upload arbitrary files, leading to remote code execution by intercepting upload requests and renaming files to executable extensions.

HS Brand Logo Slider 2.1 file upload remote code execution wordpress CVE-2020-37227
2r 1t 1c