Lucene search

K
wpvulndbWpvulndbWPVDB-ID:6CACE0A9-E8A8-4135-A7F8-CE705402F36E
HistoryNov 03, 2023 - 12:00 a.m.

HTML filter and csv-file search < 2.8 - Contributor+ Local File Inclusion

2023-11-0300:00:00
wpscan.com
2
html filter
csv-file search
plugin
vulnerability
local file inclusion

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

Description The plugin does not properly sanitize and validate the ‘src’ attribute of the ‘csvsearch’ shortcode, leading to a Local File Inclusion vulnerability.

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

Related for WPVDB-ID:6CACE0A9-E8A8-4135-A7F8-CE705402F36E