ELEX WordPress HelpDesk & Customer Ticketing System Unauthenticated Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the ELEX WordPress HelpDesk & Customer Ticketing System plugin, affecting all versions through 3.3.1. The issue arises from inadequate file type validation in the 'eh_crm_new_ticket_post()' function, enabling unauthenticated users to upload arbitrary files to the server. This vulnerability could potentially lead to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, which may be used to execute malicious code on the server.

Reproduction

The vulnerability can be reproduced by sending a request to the 'eh_crm_new_ticket_post()' function without proper authentication. The request must include a file that takes advantage of the missing validation to upload arbitrary content to the server.

Remediation

Users are advised to update the plugin to version 3.3.2 or later.