{"cvss":0.0,"datePublished":"2023-12-24T00:00:00Z","dateUpdated":"2023-12-24T00:00:00Z","description":"The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.","dueDate":"","id":"CVE-2021-24284","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"kaswara","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"kaswara_project kaswara Unrestricted Upload of File with Dangerous Type","vendor":"kaswara_project"}