CVE-2023-5099

CVE-2023-5099 describes a Local File Inclusion vulnerability in the WordPress plugin HTML filter and csv-file search . Up to version 2.7, the plugin fails to sanitize the src attribute of the csvsearch shortcode, allowing authenticated users with contributor permissions or higher to include and e...

PT-2023-31720

Name of the Vulnerable Software and Affected Versions HTML filter and csv-file search plugin for WordPress versions up to, and including, 2.7 Description The issue allows authenticated attackers with contributor-level permissions and above to include and execute arbitrary files on the server via...