← Back

Simple Schools Staff Directory

simple_schools_staff_directory

Vendor: Simple Schools Staff Directory Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24663
1Simple Schools Staff Directory Project
1Simple Schools Staff Directory
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, le...Show more
The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, leading to RCEShow less