Vulnerability Details CVE-2018-1000811
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.119
EPSS Ranking 93.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References