← voltar
CVE-2022-1392CWE-22

Videos sync PDF <= 1.7.4 - Unauthenticated LFI

23Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 11%
probabilidade de exploração
11%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues