CVE-2024-7447

CVSS V2 None CVSS V3 None
Description
The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'fnsf_af2_handel_file_upload' function in all versions up to, and including, 3.7.3.2. This makes it possible for unauthenticated attackers to upload arbitrary media to the site, even if no forms exist.
Overview
  • CVE ID
  • CVE-2024-7447
  • Assigner
  • Wordfence
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-08-28T11:31:24.972Z
  • Last Modified Date
  • 2024-08-28T13:25:43.796Z
History
Created Old Value New Value Data Type Notes
2024-08-29 13:04:39 Added to TrackCVE