Description

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Remediation

References

CVE-2023-28330

Related Vulnerabilities

WordPress Plugin Import Legacy Media Cross-Site Scripting (0.1)

WordPress Plugin Email posts to subscribers Multiple Vulnerabilities (2.0)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40743)

WordPress Plugin SS Downloads Multiple Cross-Site Scripting Vulnerabilities (1.4.4.1)

WordPress Plugin Wordpress Membership SwiftCloud.io SQL Injection (1.0)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CVE-2023-28330