high7.5
CVE-2015-5682
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir varia…
Impact
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Powerplay Gallery Project | Powerplay Gallery | Version 3.3 |