Pular para o conteúdo
Ver todas as ameaças

CVE-2021-34638

Alvo: Não informado

Descrição

Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a file containing configuration information or an uploaded JavaScript with an image extension This issue affects: WordPress Download Manager version 3.1.24 and prior versions.

Software
Não informado
Tipo Software
Core
CVE
CVE-2021-34638
Tags
Nâo informado
Data de publicação
05/08/2021
Última atualização
24/02/2022
Pontuação em CVSS 3.0
6.5
Médio
plugins premium WordPress