CVSS 3.1 Score 7.2 of 10 (high)


Published Mar 26, 2024
Updated: Mar 27, 2024
CWE ID 434


CVE-2023-6091 is a vulnerability categorized as CWE-434 (Unrestricted Upload of File with Dangerous Type). It affects the mndpsingh287 Theme Editor, specifically versions from n/a through 2.7.1. The vulnerability allows for the unrestricted upload of files with dangerous types. The risk score is 25, indicating a high severity level, with a base score of 7.2. It requires high privileges and has no user interaction required. The attack vector is through the network, with high impacts on integrity and confidentiality. The availability impact is also high. Remediation measures are not provided in the given information.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6091 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options