Vulnerability Details CVE-2018-1000811
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.231
EPSS Ranking 95.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References