PT-2018-16868 · WordPress · Gd Rating System
CVE-2018-5287
·
Published
2018-01-08
·
Updated
2018-01-19
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
GD Rating System plugin version 2.3
Description
The issue concerns a Directory Traversal problem in the
wp-admin/admin.php panel, specifically affecting the gd-rating-system-about page. This is related to a parameter in the admin panel.Recommendations
For GD Rating System plugin version 2.3, consider restricting access to the vulnerable
gd-rating-system-about page in the wp-admin/admin.php panel until a fix is available. Avoid using the affected parameter in the admin panel to minimize the risk of exploitation.Exploit
Fix
DoS
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gd Rating System