Design/Logic Flaw

2020-04-2218:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.1%

JSON

An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.

CPENameOperatorVersion
elementor_page_builderle2.7.4

CPE	Name	Operator	Version
	elementor_page_builder	le	2.7.4

References

pentest.co.uk/labs/advisory/cve-2020-7055/

pentest.co.uk/labs/vulnerability-disclosure-cve-2020-7055/