RULE(RULE ID:338559)

Rule General Information
Release Date: 2024-11-19
Rule Name: WordPress Ajar in5 Embed Plugin Arbitrary File Upload Vulnerability (CVE-2024-50473)
Severity:
CVE ID:
Rule Protection Details
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through 3.1.3.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference: https://patchstack.com/database/vulnerability/ajar-productions-in5-embed/wordpress-ajar-in5-embed-plugin-3-1-3-arbitrary-file-upload-vulnerability?_s_id=cve
Solutions
Please contact the software vendor to update the software patch.