5.3
Medium
CVE-2023-5177 The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 exposes the full path of a file when putting in a…
Description
The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Vrm 360 3D Model Viewer 1.2 | earliest → 1.2.1 | No fix stated |