Lucene search
PRIOn knowledge basePRION:CVE-2022-4324HistoryJan 02, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
5
custom field template
wordpress plugin
unserialises
imported files
php object injection
high privilege user
malicious file
gadget chain
nvd
The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| custom_field_template | lt | 2.5.8 |
Related
nvd
nvd
CVE-2022-4324
2023-01-02 22:15:16
cvelist
cvelist
CVE-2022-4324 Custom Field Template < 2.5.8 - Admin+ PHP Object Injection
2023-01-02 21:49:28
cve
cve
CVE-2022-4324
2023-01-02 22:15:16