Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-35627
HistoryDec 28, 2020 - 3:15 p.m.

Design/Logic Flaw

2020-12-2815:15:00
PRIOn knowledge base
www.prio-n.com
3

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function “Custom Gift Card Template”, the function of uploading a custom image is used, changing the name of the image extension to PHP and executing PHP code on the server.

CPENameOperatorVersion
gift_cardseq3.0.2

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

Related for PRION:CVE-2020-35627