Description

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Remediation

References

CVE-2023-28330

Related Vulnerabilities

WordPress Plugin Share Buttons by AddThis Cross-Site Scripting (5.0.12)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1952)

WordPress Plugin YITH WooCommerce Gift Cards Premium Arbitrary File Upload (3.19.0)

WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions SQL Injection (2.2.7)

Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2025-29087)

Severity

Medium

Classification

CVE-2023-28330 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities