PT-2024-25405 · Wpcustomify · Wpcustomify Customify Site Library
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WPCustomify Customify Site Library versions 0.0.0 through 0.0.9
Description
The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection', which affects the WPCustomify Customify Site Library. This allows for Code Injection.
Recommendations
For versions 0.0.0 through 0.0.9, update to a version later than 0.0.9 to resolve the issue.
At the moment, there is no information about additional mitigation measures for this specific issue.
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpcustomify Customify Site Library