Skip to content
6.5 Medium

CVE-2024-38772 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetWidgets…

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce allows PHP Local File Inclusion.This issue affects JetWidgets for Elementor and WooCommerce: from n/a through 1.1.7.

Affected products and versions

Product Affected versions Fixed in
JetWidgets for Elementor and WooCommerce 1.1 earliest → 1.1.7 No fix stated
jetwidgets_for_elementor 1.1 earliest → 1.1.7 No fix stated
Track this CVE