Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-whq7-7399-vqph

Опубликовано: 31 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

EPSS

Процентиль: 96%
0.27109
Средний

8.8 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

EPSS

Процентиль: 96%
0.27109
Средний

8.8 High

CVSS3

Дефекты

CWE-502