CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appscreo Easy Social Share Buttons allows PHP Local File Inclusion.This issue affects Easy Social Share Buttons: from n/a through 9.4.
Explanation of Vulnerability in Simple Terms
Easy Social Share Buttons versions 9.4 and earlier contain a path traversal vulnerability that allows authenticated attackers to read or write arbitrary files on the server. The vulnerability requires low-level authentication and high attack complexity, but successful exploitation can compromise site confidentiality, integrity, and availability across the entire system.
What an attacker can do
Read or write arbitrary files on the server, potentially accessing sensitive data or modifying site files.
Potential impact on your site
An authenticated user could access sensitive files, modify site code, or disrupt site operations.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
