CVE-2020-6008

CRITICAL

lifterlms lifterlms Unrestricted Upload of File with Dangerous Type

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2020-6008 has a selected CVSS score of 9.8 (critical).

Description

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 31, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

2
ProductSourceVersion range

lifterlms

Browse lifterlms / lifterlms
VulnCheckVersion data not supplied

LifterLMS Wordpress Plugin

CVE List< 3.37.15affected

References

2