Lucene search

K
nvd[email protected]NVD:CVE-2024-37092
HistoryJun 24, 2024 - 1:15 p.m.

CVE-2024-37092

2024-06-2413:15:10
CWE-22
web.nvd.nist.gov
cve-2024-37092
stylemixthemes consulting
php local file inclusion
path traversal

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Improper Limitation of a Pathname to a Restricted Directory (β€˜Path Traversal’) vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0.

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Related for NVD:CVE-2024-37092