PT-2025-22748 · Elementor · Drag/Drop File Upload For Elementor Forms
CVSS v3.1
8.6
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Drag and Drop File Upload for Elementor Forms versions 1.4.3 and earlier
Description
The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability affects the Drag and Drop File Upload for Elementor Forms, allowing unauthorized access to files outside the intended directory.
Recommendations
For versions 1.4.3 and earlier, update to a version later than 1.4.3 to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Drag/Drop File Upload For Elementor Forms