Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ch9p-8jp8-qjvq

Опубликовано: 10 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

EPSS

Процентиль: 78%
0.01171
Низкий

7.2 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.2
nvd
около 3 лет назад

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

EPSS

Процентиль: 78%
0.01171
Низкий

7.2 High

CVSS3

Дефекты

CWE-502