Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9629-mfj6-679x

Опубликовано: 19 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

EPSS

Процентиль: 88%
0.04205
Низкий

8.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

EPSS

Процентиль: 88%
0.04205
Низкий

8.8 High

CVSS3

Дефекты

CWE-94