Essential Blocks < 4.4.3 – Unauthenticated Local File Inclusion
Discription
Description The plugin does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks. PoC The PoC will be displayed on January 04, 2024, to give users the time to…Read More
References
Back to Main