CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path Traversal.This issue affects Frontend Admin by DynamiApps: from n/a through <= 3.28.7.
Explanation of Vulnerability in Simple Terms
Frontend Admin by DynamiApps versions 3.28.7 and earlier contain a path traversal vulnerability that allows high-privilege users to read arbitrary files from the server. An attacker with admin-level access can bypass directory restrictions and access sensitive files outside the intended application directory. The vulnerability affects the file handling mechanism and requires administrative credentials to exploit.
What an attacker can do
Read arbitrary files from the server filesystem.
Potential impact on your site
Admin accounts could be compromised to expose sensitive configuration files, database credentials, or other private data.
Conditions required to exploit
Attacker must have high-level admin privileges on the site.
Key dates
External resources
