Tms-outsource vulnerabilities
We track 1 vulnerability in Tms-outsource products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Tms-outsource vulnerabilities
- 8.8 High severity
Amelia – Events & Appointments Booking Calendar: Unrestricted Upload of File with Dangerous Type
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amel