Product

Broadstreet Ad Widget (2.2.0 - 2.11.9)

1 brief RSS

Broadstreet Ad Widget: Local File Inclusion in views/modal/index.php (CVE-2017-20289)

The Broadstreet Ad Widget WordPress plugin (versions 2.2.0 through 2.11.9) is vulnerable to authenticated local file inclusion via directory traversal in the 'step' parameter, allowing for arbitrary PHP code execution.

Broadstreet Ad Widget wordpress lfi web-vulnerability

1r 1t 1c 2h ago