medium4.8

CVE-2024-43922

Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc.

Impact

Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc. NitroPack allows Code Injection.This issue affects NitroPack: from n/a through 1.16.7.

Affected products

Vendor	Product	Affected versions
Nitropack	Nitropack	before 1.16.8

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://patchstack.com/database/vulnerability/nitropack/wordpress-nitropack-plugin-1-16-7-unauthenticated-arbitrary-shortcode-execution-vulnerability?_s_id=cve