low2.7
CVE-2024-10098
The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and…
Impact
The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spiderteams | Applyonline - Application Form Builder And Manager | before 2.6.3 |