CVE-2024-6306

Опубликовано: 25 июн. 2024

Источник: nvd

Описание

Rejected reason: REJECT Accidental Reservation making this a duplicate. Please use CVE-2024-32111.

Связанные уязвимости

GHSA-vh29-7vg4-p7f4

CVSS3: 4.3

github

больше 1 года назад

WordPress Core is vulnerable to Directory Traversal in various versions up to 6.5.5 via the Template Part block. This makes it possible for authenticated attackers, with Contributor-level access and above, to include arbitrary HTML Files on sites running Windows.