CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.4.
Explanation of Vulnerability in Simple Terms
Ultimate Bootstrap Elements for Elementor versions up to 1.4.4 contain a path traversal vulnerability that allows authenticated attackers to read and write arbitrary files on the server. An attacker with low-level access can bypass file restrictions and access sensitive data or modify site files. This vulnerability requires network access and some technical knowledge to exploit but poses a significant risk to site integrity and confidentiality.
What an attacker can do
Read and write arbitrary files on the server, including sensitive configuration and database files.
Potential impact on your site
Attackers with basic site access can steal database credentials, modify core files, or inject malicious code.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
