PT-2023-16477 · WordPress · Metform Elementor Contact Form Builder
CVSS v3.1
8.3
Alta
| Vetor | AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Metform Elementor Contact Form Builder plugin for WordPress versions up to, and including, 3.3.0
Description
The issue allows unauthenticated attackers to embed untrusted input into exported CSV files. This can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
Recommendations
For versions up to, and including, 3.3.0, update to a version later than 3.3.0 to resolve the issue.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Metform Elementor Contact Form Builder