CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.9.1 via the 'save_block_css' function. This makes it possible for authenticated attackers, with Author-level access and above, to create CSS files in any directory, and delete CSS files in any directory in a Windows environment.
Explanation of Vulnerability in Simple Terms
HT Mega Addons for Elementor versions up to 2.9.1 contain a path traversal vulnerability that allows authenticated users to write files to unintended locations on the server. An attacker with low-level site access can manipulate file paths to store malicious content outside the intended directory, potentially compromising site integrity. Update to a version newer than 2.9.1 to resolve this issue.
What an attacker can do
Write files to arbitrary locations on the server outside the intended directory.
Potential impact on your site
Malicious files could be written to sensitive directories, potentially allowing code execution or data manipulation.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
