Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j269-93gg-337v

Опубликовано: 28 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

EPSS

Процентиль: 75%
0.00855
Низкий

7.2 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.2
nvd
около 3 лет назад

The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

EPSS

Процентиль: 75%
0.00855
Низкий

7.2 High

CVSS3

Дефекты

CWE-502