Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-0316
HistoryJan 23, 2023 - 3:15 p.m.

Design/Logic Flaw

2023-01-2315:15:00
PRIOn knowledge base
www.prio-n.com
6
westand wordpress theme
footysquare wordpress theme
aidreform wordpress theme
statfort wordpress theme
club-theme wordpress theme
kingclub-theme wordpress theme
spikes wordpress theme
spikes-black wordpress theme
soundblast wordpress theme
bolster wordpress theme
upload validation
lang_upload.php
unauthenticated attacker

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.

CPENameOperatorVersion
westandlt2.1

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%