Exploit for Contact Form 7 < 5.3.2 - Unrestricted File Upload CVE-2020-35489

Name: Exploit for Contact Form 7 < 5.3.2 - Unrestricted File Upload CVE-2020-35489
Rating: 5 (416 reviews)

2020-12-17 | CVSS 10.0

## https://sploitus.com/exploit?id=WPEX-ID:7391118E-EEF5-4FF8-A8EA-F6B65F442C63
Append a unicode special character (from U+0000 [null] to U+001F [us]) to a filename and upload it via the ContactForm7 upload feature