{"cvss":0.0,"datePublished":"2024-06-28T00:00:00Z","dateUpdated":"2024-06-28T00:00:00Z","description":"modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file.","dueDate":"","id":"CVE-2018-10942","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"attribute_wizard","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"attribute_wizard_project attribute_wizard Unrestricted Upload of File with Dangerous Type","vendor":"attribute_wizard_project"}