Description (CNA)
The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings settings before outputting them in a PHP file, which could lead to RCE
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Speed Booster Pack ⚡ PageSpeed Optimization Suite | affected 4.2.0-beta before 4.2.0-beta*; affected 4.2.0 before 4.2.0 |
CWE
CWE-94
References
- https://wpscan.com/vulnerability/945d6d2e-fa25-42c0-a7b4-b1794732a0df
- https://m0ze.ru/vulnerability/%5B2021-05-10%5D-%5BWordPress%5D-%5BCWE-94%5D-Speed-Booster-Pack-WordPress-Plugin-v4.2.0-beta.txt
ADP enrichment
No English description supplied.