CVE-2023-2252

Directorist < 7.5.4 - Admin+ LFI

Low · published January 16, 2024

CVSS v3.1
2.7
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01342 · 71.1th percentile
Published
2024-01-16T15:55Z
EPSS history
Timeline
  • 16 JAN 15:55Z
    Directorist < 7.5.4 - Admin+ LFI
    cvelistv5