CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginOps Landing Page Builder allows PHP Local File Inclusion.This issue affects Landing Page Builder: from n/a through 1.5.2.0.
Explanation of Vulnerability in Simple Terms
Landing Page Builder versions up to 1.5.2.0 contain a path traversal vulnerability that allows authenticated users to read and modify arbitrary files on the server. An attacker with low-level access can bypass directory restrictions and access sensitive files outside the intended application folder. This affects confidentiality, integrity, and availability of the site.
What an attacker can do
Read and modify arbitrary files on the server outside the application directory.
Potential impact on your site
Any authenticated user can access sensitive files, configuration data, and potentially compromise the entire site.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
