CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishList Member X allows Path Traversal.This issue affects WishList Member X: from n/a through 3.26.6.
Explanation of Vulnerability in Simple Terms
WishList Member X versions up to 3.26.6 contain a path traversal vulnerability that allows an authenticated attacker to cause a denial of service by disrupting site availability. The vulnerability requires low-level user privileges and network access but no user interaction. The impact extends beyond the vulnerable component itself.
What an attacker can do
Disrupt site availability by exploiting a path traversal flaw to trigger a denial of service.
Potential impact on your site
Authenticated users with low privileges can crash or disable your site without your knowledge.
Conditions required to exploit
Attacker must have low-level user account credentials and network access to the site.
Key dates
External resources
Related vulnerabilities
