Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v9wx-wp77-q49m

Опубликовано: 15 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

EPSS

Процентиль: 95%
0.18983
Средний

7.2 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.2
nvd
больше 2 лет назад

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

EPSS

Процентиль: 95%
0.18983
Средний

7.2 High

CVSS3

Дефекты

CWE-502