📦

fcchat_widget

Vendor: wordpress

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 14.40% Exploit Prob.
Latest CVE CVE-2012-3578 Jun 17

Security Vulnerability Index

Page 1 / 1
6.8 CVSS
CVE-2012-3578
RCE Exploit Found

Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.

EPSS: 14.40%