7.5
CVE-2016-10956
- EPSS 91.05%
- Veröffentlicht 16.09.2019 12:15:10
- Zuletzt bearbeitet 21.11.2024 02:45:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMail Masta <= 1.0 - Local File Inclusion
The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
Mögliche Gegenmaßnahme
Mail Masta: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Mail Masta
Version
*-1.0
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mail-masta Project ≫ Mail-masta Version1.0 SwPlatformwordpress
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 91.05% | 0.996 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.