Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6c4r-hprj-699g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.

EPSS

Процентиль: 88%
0.0372
Низкий

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 9.8
nvd
больше 6 лет назад

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.

EPSS

Процентиль: 88%
0.0372
Низкий

Дефекты

CWE-269