Lucene search

K
nvd[email protected]NVD:CVE-2023-31231
HistoryDec 20, 2023 - 7:15 p.m.

CVE-2023-31231

2023-12-2019:15:09
CWE-434
web.nvd.nist.gov
4
unrestricted upload
file type
vulnerability
unlimited elements
elementor

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

16.0%

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.

Affected configurations

Nvd
Node
unlimited-elementsunlimited_elements_for_elementor_\(free_widgets\,_addons\,_templates\)Range<1.5.66wordpress
VendorProductVersionCPE
unlimited-elementsunlimited_elements_for_elementor_\(free_widgets\,_addons\,_templates\)*cpe:2.3:a:unlimited-elements:unlimited_elements_for_elementor_\(free_widgets\,_addons\,_templates\):*:*:*:*:*:wordpress:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

16.0%

Related for NVD:CVE-2023-31231