CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The CSSIgniter Team MaxSlider maxslider allows Path Traversal.This issue affects MaxSlider: from n/a through <= 1.2.3.
Explanation of Vulnerability in Simple Terms
MaxSlider versions 1.2.3 and earlier contain a path traversal vulnerability that allows authenticated users to read or write arbitrary files on the server. An attacker with low-level site access can bypass directory restrictions and access sensitive files outside the intended upload directory. This affects file confidentiality and integrity.
What an attacker can do
Read or write arbitrary files on the server outside the intended directory.
Potential impact on your site
Attackers with contributor or subscriber access could read config files, modify core files, or exfiltrate sensitive data.
Conditions required to exploit
Attacker must have low-level authenticated access to the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
