CVE-2021-24491 — Fileviewer <= 2.2 - Arbitrary File Upload/Deletion via CSRF
The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logge…
Published: 2021-09-13 · CVSS: Unscored
The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7