Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:simple_schools_staff_directory:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSimple Schools Staff Directory (91fe96b0-e168-5124-976a-449a355a52c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24663 vulnerable 2026-06-08 05:30:38.965424 Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File Upload
The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, leading to RCE
Published: 2021-09-20T10:06:49.000Z
Updated: 2024-08-03T19:42:16.028Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.