6.5
Medium
CVE-2024-38772 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetWidgets…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce allows PHP Local File Inclusion.This issue affects JetWidgets for Elementor and WooCommerce: from n/a through 1.1.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetWidgets for Elementor and WooCommerce 1.1 | earliest → 1.1.7 | No fix stated |
| jetwidgets_for_elementor 1.1 | earliest → 1.1.7 | No fix stated |