Vulnerability · Published Jul 11, 2022 · Assigned by WPScan
CVE-2022-1952eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
Critical 9.8
In plain English
A critical-severity unrestricted file upload in Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 24.6% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC | 1.1.16 – before 1.1.16 |
Weakness: CWE-434