← CVE Intelligence

CVE-2022-3357

Smart Slider 3 < 3.5.1.11 - PHP Object Injection PUBLISHED

Description (CNA)

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

Affected (CNA)

Vendor / productVersions
Unknown / Smart Slider 3affected 3.5.1.11 before 3.5.1.11

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.