Description loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive. Remediation References CVE-2022-48285 Related Vulnerabilities WordPress Plugin Intuitive Custom Post Order Multiple Vulnerabilities (3.1.3) WordPress Plugin Anti Spam Protection without CAPTCHA powered by Keypic Security Bypass (2.1.2) WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7168) WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.11) Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8115) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Tags Missing Update Known Vulnerabilities CWE-22 CVE-2022-48285