8.1
Élevée
CVE-2023-5355 The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files,…
Description
The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Awesome Support 6.1 | premières → < 6.1.5 | 6.1.5 |
Autres CVE de Awesome Support
Les 4 CVE de Awesome Support →
CVE-2023-5352
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing…
4.3
Moyenne
CVE-2023-5354
The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back…
6.1
Moyenne
CVE-2022-3511
The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded…
6.5
Moyenne