high8.8
CVE-2023-1273
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, all…
Impact
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nicdark | Nd Shortcodes | before 7.0 |