Exploit for FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access CVE-2023-3664

Name: Exploit for FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access CVE-2023-3664
Rating: 5 (65 reviews)

2023-08-30 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:D59E6EAC-3EBF-40E0-800C-8CBEF345423F
On a multisite instance, log in as an admin. Click on File Organizer in the sidebar. The UI gives full control to the files on the server, despite not being a super admin.