The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2020-12-17T18:16:00

Updated: 2020-12-17T18:16:00

Reserved: 2020-12-17T00:00:00


Link: CVE-2020-35489

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2020-12-17T19:15:14.353

Modified: 2020-12-22T12:57:53.837


Link: CVE-2020-35489

JSON object: View

cve-icon Redhat Information

No data.

CWE