3 matches found
CVE-2022-1037
The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs...
7.2CVSS0.01313EPSS
SaveExploits1References1
CVE-2022-1037
CVE-2022-1037 affects the WordPress EXMAGE plugin prior to 1.0.7. The issue arises because images added via URLs are not consistently treated as external, enabling a blind SSRF through local URLs. Documented impact is a blind SSRF condition; no exploit details are provided beyond this description...
7.2CVSS6.8AI score0.01313EPSS
SaveExploits1References1Affected Software1
CVE-2022-1037 EXMAGE < 1.0.7 - Admin+ Blind SSRF
The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs...
7.1AI score0.01313EPSS
SaveExploits1References1
20