CVE-2021-44911
Medium
Description
XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading the Mouse over button and When selected button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities.
SeverityMedium
CVSS5.4
Exploit probability—
Product
Xpressengine
PublishedFeb 9, 2022
First seenFeb 9, 2022
How to fix
Update
- xpressengine xpressengine1.11.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xpressengine xpressengine | v < 1.11.6 | 1.11.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.