high7.5
CVE-2018-20463
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress.
Impact
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jsmol2wp Project | Jsmol2wp | Version 1.07 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wpvulndb.com/vulnerabilities/9197
- https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96-amp-SSRF
- https://wpvulndb.com/vulnerabilities/9197
- https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96-amp-SSRF