Lucene search

PRIOn knowledge basePRION:CVE-2022-4063

HistoryDec 19, 2022 - 2:15 p.m.

Design/Logic Flaw

2022-12-1914:15:00

PRIOn knowledge base

www.prio-n.com

inpost gallery

wordpress plugin

php extract function

html views

malicious files

urls

code execution

security vulnerability

9.4 High

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON

The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP’s extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.

CPENameOperatorVersion
inpost_gallerylt2.1.4.1

CPE	Name	Operator	Version
	inpost_gallery	lt	2.1.4.1

References

wpscan.com/vulnerability/6bb07ec1-f1aa-4f4b-9717-c92f651a90a7