Description

In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.

Remediation

References

CVE-2018-20149

Related Vulnerabilities

WordPress Plugin Post Indexer (WPMU DEV) Multiple Vulnerabilities (3.0.6.1)

Drupal Core 7.x Arbitrary File Overwrite (7.0 - 7.77)

WordPress Plugin Rezgo Online Booking Cross-Site Scripting (4.1.7)

Oracle Application Server Other Vulnerability (CVE-2007-2119)

MySQL CVE-2018-2818 Vulnerability (CVE-2018-2818)

Severity

Medium

Classification

CVE-2018-20149 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities