Description (CNA)
The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Error Log Viewer by BestWebSoft | affected 1.1.2 before 1.1.2 |
CWE
CWE-352, CWE-22
References
ADP enrichment
No English description supplied.