high7.5
CVE-2014-10397
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.
Impact
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Para | Antioch | through 2014-09-07 |