MojoJoomla Hospital Management System Unrestricted File Upload Vulnerability Allowing Web Shell Upload

A vulnerability allowing unrestricted file upload has been identified in the MojoJoomla Hospital Management System plugin for WordPress, affecting versions through 47.0(20-11-2023). This vulnerability could be exploited to upload a web shell to the server, potentially leading to unauthorized access and execution of malicious actions.

Impact

Exploitation of this vulnerability could allow a malicious actor to upload arbitrary files, including web shells, which could be executed to gain further access to the website.

Remediation

Users of the affected WordPress Hospital Management System plugin are advised to update to a version released after 47.0(20-11-2023). Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available.