Lucene search
WPScanCVELIST:CVE-2023-5355HistoryNov 06, 2023 - 8:41 p.m.
CVE-2023-5355 Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion
2023-11-0620:41:57
WPScan
www.cve.org
3
cve-2023-5355
awesome support
arbitrary file deletion
wordpress plugin
sanitize file paths
temporary attachment files
The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Awesome Support",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "6.1.5"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-5355
2023-11-06 21:15:09
prion
prion
Code injection
2023-11-06 21:15:00
nvd
nvd
CVE-2023-5355
2023-11-06 21:15:09
wpexploit
wpexploit
Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion
2023-10-16 00:00:00
wpvulndb
wpvulndb
Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion
2023-10-16 00:00:00