CVE-2024-8725 Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
Authenticated subscribers can upload malicious CSS/JS files to arbitrary directories, leading to stored XSS and potential code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-8725?
CVE-2024-8725 is a medium-severity vulnerability in saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution, published on 26 Sep 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a lack of proper checks to ensure lower-privileged roles cannot upload .css and .js files to arbitrary directories. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an administrator, to upload .css and .js files to any directory within the WordPress root directory, which could lead to Stored Cross-Site Scripting. The Advanced File Manager Shortcodes plugin must be installed to exploit this vulnerability.
Weakness: CWE-434
Which versions are affected by CVE-2024-8725?
It affects 1 product.
Products include Advancedfilemanager Advanced File Manager.
How do I fix CVE-2024-8725?
No fix has been published for CVE-2024-8725 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-8725 being exploited?
There is no known exploitation of CVE-2024-8725 in the wild and no public exploit code.
Other vulnerabilities in saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
- CVE-2024-13333 Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-11391 Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-8126 Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-5598 Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
- CVE-2024-8704 Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Sources
Also known as GHSA-gqqx-m28r-fmjj.