1 matches found
AccessAlly < 3.5.7 - $_SERVER Superglobal Leakage
In the plugin, the file "resource/frontend/product/product-shortcode.php" responsible for the accessallyorderform shortcode is dumping serialize$SERVER, which contains all environment variables. The leakage occurs on all public facing pages containing the accessallyorderform shortcode, no login o...
5CVSS2AI score0.05404EPSS
SaveExploits2
20