CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Martin Greenwood WPSPX wpspx allows PHP Local File Inclusion.This issue affects WPSPX: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
WPSPX versions 1.0.2 and earlier contain a path traversal vulnerability that allows an attacker to read or write arbitrary files on the server. The vulnerability requires the attacker to trick a user into visiting a malicious link. An attacker can access sensitive files, modify site content, or potentially execute code depending on file permissions.
What an attacker can do
Read or write arbitrary files on the server by crafting a malicious URL.
Potential impact on your site
Attackers could steal configuration files, modify site files, or compromise the entire installation if they trick users into clicking links.
Conditions required to exploit
User must click a malicious link or visit an attacker-controlled page (user interaction required).
Key dates
External resources
Related vulnerabilities
