9.8

CVE-2022-0316

Exploit

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.

Data is provided by the National Vulnerability Database (NVD)
Aidreform Project ≫ Aidreform Version- SwPlatformwordpress
Chimpgroup ≫ Bolster Version- SwPlatformwordpress
Chimpgroup ≫ Spikes Version- SwPlatformwordpress
Chimpgroup ≫ Westand SwPlatformwordpress Version < 2.1
Club-theme Project ≫ Club-theme Version- SwPlatformwordpress
Footysquare Project ≫ Footysquare Version- SwPlatformwordpress
Pixfill ≫ Kings Club Version- SwPlatformwordpress
Soundblast Project ≫ Soundblast Version- SwPlatformwordpress
Spikes-black Project ≫ Spikes-black Version- SwPlatformwordpress
Statfort Project ≫ Statfort Version- SwPlatformwordpress
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 22.56% 0.956
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H