Hs Brand Logo Slider
1 CVEs
product
Monthly
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
WordPress
RCE
File Upload
Wordpress Plugin
+1
NVD
Exploit-DB
CVSS 4.0
8.7
EPSS
0.1%
EPSS 0%
CVSS 8.7
HIGH
POC
This Week
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
WordPress
RCE
+3
NVD
Exploit-DB