Unscored CVE-2023-4311 EUVD-2023-54178GHSA-7x7j-52gx-4h55

Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE

Published Dec 18, 2023 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode.

Vendor	Product	Affected	Fixed
—	Vrm 360 3D Model Viewer	≤ 1.2.1	—