CVE Vulnerabilities

CVE-2022-29448

Use of Incorrectly-Resolved Name or Reference

Published: May 20, 2022 | Modified: May 26, 2022
CVSS 3.x
4.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Companys Herd Effects plugin <= 5.2 at WordPress.

Weakness

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Affected Software

Name Vendor Start Version End Version
Herd_effects Wow-estore * 5.2 (including)

References