Input validation vulnerability in School Management System for WordPress 91.5.0

The School Management System for WordPress plugin is at risk of unauthorized file uploads. This is because the plugin does not check the type of file being uploaded in the mj_smgt_user_avatar_image_upload() function. This vulnerability exists in all versions up to 91.5.0, which means that attackers without proper authorization can upload any type of file to the website’s server. This could potentially lead to remote code execution.

Detected in:

School Management System for Wordpress open vulnerable versions: >= * <= 91.5.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.