exploitDog

CVE-2018-9172

Опубликовано: 01 апр. 2018

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.

Ссылки

https://wordpress.org/plugins/wp-file-upload/#developers
Third Party Advisory
https://www.exploit-db.com/exploits/44443/
Exploit
Third Party Advisory
VDB Entry
https://www.iptanus.com/new-version-4-3-3-of-wordpress-file-upload-plugin/
Vendor Advisory
https://wordpress.org/plugins/wp-file-upload/#developers
Third Party Advisory
https://www.exploit-db.com/exploits/44443/
Exploit
Third Party Advisory
VDB Entry
https://www.iptanus.com/new-version-4-3-3-of-wordpress-file-upload-plugin/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:iptanus:wordpress_file_upload:*:*:*:*:*:wordpress:*:*

Версия до 4.3.3 (исключая)

EPSS

Процентиль: 90%

0.04088

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-3r72-p59x-qr4h

CVSS3: 5.4

github

больше 4 лет назад

The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.

EPSS

Процентиль: 90%

0.04088

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79