CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
What the vulnerability does
Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation, FAQs with AI Assistance.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through 11.30.2.
Explanation of Vulnerability in Simple Terms
The Knowledge Base for Documentation, FAQs with AI Assistance plugin contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code on affected sites. The vulnerability exists in how the plugin processes untrusted serialized data without proper validation. Attackers can exploit this remotely without user interaction to compromise site integrity and access sensitive data.
What an attacker can do
Execute arbitrary code on the site and read sensitive data without authentication.
Potential impact on your site
Attackers can take full control of your site, steal data, and modify content without your knowledge.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
