Exploit for Avada < 7.11.7 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing CVE-2024-2340

Name: Exploit for Avada < 7.11.7 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing CVE-2024-2340
Rating: 5 (104 reviews)

2024-03-20 | CVSS 5.3

## https://sploitus.com/exploit?id=WPEX-ID:507E1D07-4953-4A31-81E8-80F01F971E2A
Access the URL: https://target-site.tld/wp-content/uploads/fusion-forms/ on sites running Avada with versions lower than 7.11.7 and that have directory browsing enabled on their webserver to have access to the files uploaded in there.