high8.8
CVE-2023-47621
Guest Entries Remote code execution via file uploads
Impact
### Impact When using the file uploads feature, it was possible to upload PHP files. ### Patches The vulnerability is fixed in v3.1.2.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | duncanmcclean/guest-entries | < 3.1.2 | 3.1.2 |
| composer | doublethreedigital/guest-entries | < 3.1.2 | 3.1.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Duncanmcclean | Guest Entries | before 3.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/duncanmcclean/guest-entries/commit/a8e17b4413bfbbc337a887761a6c858ef1ddb4da
- https://github.com/duncanmcclean/guest-entries/security/advisories/GHSA-rw82-mhmx-grmj
- https://github.com/advisories/GHSA-rw82-mhmx-grmj
- https://nvd.nist.gov/vuln/detail/CVE-2023-47621