Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m8mp-83qq-7j4f

Опубликовано: 13 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins

EPSS

Процентиль: 94%
0.12104
Средний

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins

EPSS

Процентиль: 94%
0.12104
Средний

8.8 High

CVSS3