Description (CNA)
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.exploit-db.com/exploits/44417/
- https://wpvulndb.com/vulnerabilities/9056
- https://99robots.com/docs/wp-background-takeover-advertisements/
ADP enrichment
No English description supplied.