3 matches found
CVE-2017-18585
The posts-in-page plugin before 1.3.0 for WordPress has icaddposts template='../ directory traversal...
8.1CVSS5.8AI score0.01976EPSS
SaveExploits1References2
CVE-2017-18585
CVE-2017-18585 affects the WordPress plugin posts-in-page prior to version 1.3.0. The root cause is a directory traversal vulnerability in the ic_add_posts template, permitting access to locations outside the intended directory. The CVSS v3 base score is 8.1 (HIGH) with NETWORK attack vector and ...
8.1CVSS8.1AI score0.01976EPSS
SaveExploits1References2Affected Software1
20