Lucene search
PRIOn knowledge basePRION:CVE-2022-4236HistoryJan 02, 2023 - 10:15 p.m.
Input validation
2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
2
welcart e-commerce
wordpress
plugin
input validation
ajax action
authenticated users
arbitrary files
server security
0.001 Low
EPSS
Percentile
29.7%
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| welcart_e-commerce | lt | 2.8.5 |
Related
nvd
nvd
CVE-2022-4236
2023-01-02 22:15:16
cvelist
cvelist
CVE-2022-4236 Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
2023-01-02 21:49:30
cve
cve
CVE-2022-4236
2023-01-02 22:15:16
wpvulndb
wpvulndb
Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
2022-12-05 00:00:00
wpexploit
wpexploit
Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
2022-12-05 00:00:00