Description
mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.
Remediation
References
Related Vulnerabilities
WordPress Plugin Power Charts-Responsive Beautiful Charts & Graphs Cross-Site Scripting (0.1.0)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-10968)
WordPress Plugin Booking Package-Appointment Booking Calendar System Cross-Site Scripting (1.5.10)
WordPress Plugin Multiple Page Generator-MPG Cross-Site Request Forgery (3.3.9)
WordPress Plugin Rate my Post-WP Rating System Cross-Site Scripting (3.3.8)