Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fj32-p25w-q5jm

Опубликовано: 09 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf' shortcode in versions up to, and including, 3.3.1. This allows authenticated attackers, with subscriber-level capabilities or above to obtain sensitive information about any standard form field of any form submission.

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf' shortcode in versions up to, and including, 3.3.1. This allows authenticated attackers, with subscriber-level capabilities or above to obtain sensitive information about any standard form field of any form submission.

EPSS

Процентиль: 47%
0.00241
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 6.5
nvd
больше 2 лет назад

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf' shortcode in versions up to, and including, 3.3.1. This allows authenticated attackers, with subscriber-level capabilities or above to obtain sensitive information about any standard form field of any form submission.

EPSS

Процентиль: 47%
0.00241
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639