2 matches found
CVE-2023-6991
The JSM filegetcontents Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks...
8.8CVSS6.7AI score0.00694EPSS
SaveExploits2References1
Server side request forgery (ssrf)
The JSM filegetcontents Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks...
6.5CVSS7AI score0.00694EPSS
SaveExploits2References1Affected Software1
20