CVE-2024-37547

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Livemesh Livemesh Addons for Elementor.This issue affects Livemesh Addons for Elementor: from n/a through 8.4.0...

CVE-2024-37547

CVE-2024-37547 is a Local File Inclusion path-traversal vulnerability in the WordPress plugin Livemesh Addons for Elementor (versions up to and including 8.4.0). The underlying issue is an improper limitation of a pathname to a restricted directory. Affected product versions are

WordPress Livemesh Addons for Elementor Plugin <= 8.4.0 is vulnerable to Local File Inclusion

Software Livemesh Addons for Elementor Type Plugin Vulnerable versions = 8.4.0 Fixed in 8.4.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-37547 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 715158a91b13 Credits Ngô Thiên An ancorn from...