Skip to content
Sign in
7.5 High

CVE-2024-54376 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Spider Themes EazyDocs eazydocs allows PHP Local File Inclusion.This issue affects EazyDocs: from n/a through <= 2.8.0.

Affected products and versions

Product Affected versions Fixed in
EazyDocs 2.5 earliest → 2.5.5 No fix stated
EazyDocs 2.8 earliest → 2.8.0 No fix stated

Other CVEs of EazyDocs

The 5 CVEs of EazyDocs →
CVE-2023-47648 Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access… 7.5 High CVE-2024-38721 Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control… 7.1 High CVE-2024-38720 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EazyDocs… 6.5 Medium CVE-2024-3999 The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium
Track this CVE