CVE-2021-24970 All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion

2021-12-1310:41:31

CWE-22

WPScan

www.cve.org

0.025 Low

EPSS

Percentile

90.1%

JSON

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

CNA Affected

[
  {
    "product": "All-in-One Video Gallery",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.5.0",
        "status": "affected",
        "version": "2.5.0",
        "versionType": "custom"
      }
    ]
  }
]