Описание
The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks
EPSS
Процентиль: 17%
0.00053
Низкий
2.7 Low
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 2.7
github
4 месяца назад
The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks
EPSS
Процентиль: 17%
0.00053
Низкий
2.7 Low
CVSS3
Дефекты
CWE-22