3 matches found
Server side request forgery (ssrf)
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
5CVSS7AI score0.01464EPSS
SaveExploits0References4Affected Software1
PT-2020-15635
Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows for Server-Side Request Forgery SSRF via the "includes/lib/download.php" endpoint with the subdomain parameter. Recommendations For Canto plugin version 1.3.0, consider...
7.2CVSS0.01464EPSS
SaveExploits0References7
20