CVE Vulnerability

CVE-2021-30134

php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://wpscan.com/vulnerability/0b547728-27d2-402e-ae17-90d539344ec7 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:php_curl_class_project:php_curl_class:*:*:*:*:*:*:*:*
cpe:2.3:a:ht_slider_range_for_amazon_affiliates_project:ht_slider_range_for_amazon_affiliates:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:qiwi:woo-qiwi-payment-gateway:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:teamleade:teamleader_crm_forms:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ptwooplugins:invoicing_with_invoicexpress_for_woocommerce:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:shopello_api_project:shopello_api:*:*:*:*:*:wordpress:*:*
Information

Published : 2022-12-26 07:15

Updated : 2023-01-05 03:00

NVD link : CVE-2021-30134

Mitre link : CVE-2021-30134

Products Affected
No products.
CWE
CWE-79