exploitDog

CVE-2025-22279

Опубликовано: 10 апр. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetCompareWishlist allows PHP Local File Inclusion.This issue affects JetCompareWishlist: from n/a through 1.5.9.

Ссылки

https://patchstack.com/database/wordpress/plugin/jet-compare-wishlist/vulnerability/wordpress-jetcomparewishlist-plugin-1-5-9-local-file-inclusion-vulnerability?_s_id=cve

EPSS

Процентиль: 62%

0.00423

Низкий

7.5 High

CVSS3

Дефекты

CWE-98

Связанные уязвимости

GHSA-ccc3-69g9-36mx

CVSS3: 7.5

github

10 месяцев назад

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetCompareWishlist allows PHP Local File Inclusion.This issue affects JetCompareWishlist: from n/a through 1.5.9.

EPSS

Процентиль: 62%

0.00423

Низкий

7.5 High

CVSS3

Дефекты

CWE-98