Описание
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
EPSS
Процентиль: 9%
0.00194
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 6.5
github
4 месяца назад
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
EPSS
Процентиль: 9%
0.00194
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-502