CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Website Builder allows Manipulating Web Input to File System Calls.This issue affects Elementor Website Builder: from n/a through 3.19.0.
Explanation of Vulnerability in Simple Terms
Elementor Website Builder versions up to 3.19.0 contain a path traversal vulnerability that allows authenticated users with low privileges to read, modify, or delete arbitrary files on the server. The vulnerability requires network access and high attack complexity, but can affect the entire site's confidentiality, integrity, and availability once exploited.
What an attacker can do
Read, modify, or delete arbitrary files on the server.
Potential impact on your site
Attackers with basic user accounts can compromise site files, potentially leading to data theft or site takeover.
Conditions required to exploit
Attacker must have a low-privilege authenticated account; no user interaction required.
Key dates
External resources
Related vulnerabilities
