PT-2026-21209 · Axiomthemes · Jude
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
axiomthemes Jude versions through 1.3.0
Description
An improper control of filename for include/require statement issue exists in axiomthemes Jude, potentially allowing PHP Local File Inclusion. The issue involves the inclusion of files without proper validation, which could lead to unauthorized access or code execution.
Recommendations
Update axiomthemes Jude to a version later than 1.3.0.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jude