← CVE Intelligence

CVE-2022-4063

InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE PUBLISHED

Description (CNA)

The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.

Affected (CNA)

Vendor / productVersions
Unknown / InPost Galleryaffected 0 before 2.1.4.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.