CVE-2024-6948

CVE-2024-6948 is a critical unrestricted file upload vulnerability affecting Gargaj wuhu, specifically within the /slideeditor.php component. An attacker can remotely manipulate the newSlideFile argument to upload arbitrary files, potentially leading to full system compromise. With a CVSS score of 9.8, this vulnerability poses a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, nor are there readily available Metasploit or ExploitDB modules, and community discussion remains minimal.