CVE-2024-43221

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetGridBuilder allows PHP Local File Inclusion.This issue affects JetGridBuilder: from n/a through 1.1.2...

CVE-2024-43221

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetGridBuilder allows PHP Local File Inclusion.This issue affects JetGridBuilder: from n/a through 1.1.2...

CVE-2024-43221

CVE-2024-43221 affects Crocoblock JetGridBuilder for WordPress; improper pathname handling enables PHP Local File Inclusion (LFI). Affected: JetGridBuilder ≤ 1.1.2. Accessible by authenticated users (Contributor+). Remediation: upgrade to the patched/fixed release.

WordPress JetGridBuilder Plugin <= 1.1.2 is vulnerable to Local File Inclusion

Software JetGridBuilder Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-43221 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID be769930489f Credits João Pedro S Alcântara Kinorth Required...