Lucene search
Mohamed Magdy AbuMuslimWPEX-ID:9B15D47E-43B6-49A8-B2C3-B99C92101E10HistoryNov 15, 2021 - 12:00 a.m.
All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
2021-11-1500:00:00
Mohamed Magdy AbuMuslim
108
0.025 Low
EPSS
Percentile
90.1%
The plugin does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue
https://example.com/wp-admin/admin.php?page=all-in-one-video-gallery&tab=..%2F..%2F..%2F..%2F..%2FindexReferences
Related
cvelist
cvelist
CVE-2021-24970 All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
2021-12-13 10:41:31
cnvd
cnvd
WordPress Plugin Path Traversal Vulnerability (CNVD-2021-102395)
2021-12-15 00:00:00
prion
prion
Design/Logic Flaw
2021-12-13 11:15:00
cve
cve
CVE-2021-24970
2021-12-13 11:15:09
wpvulndb
wpvulndb
All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
2021-11-15 00:00:00
patchstack
patchstack
nuclei
nuclei
WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion
2023-03-18 22:07:09
nvd
nvd
CVE-2021-24970
2021-12-13 11:15:09