-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| duncanmcclean/guest-entries | composer | < 3.1.2 | 3.1.2 |
| doublethreedigital/guest-entries | composer | < 3.1.2 | 3.1.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from insufficient file type validation during uploads. The commit diff shows the patch added extension validation in the uploadFile method by checking for PHP-related extensions. Before this fix, the method only filtered out null values without checking file types, making it the clear entry point for malicious file uploads. Other changes in the commit are either test additions or syntax reordering, not security-related.