nvd-json-data-feeds/CVE-2023/CVE-2023-49xx/CVE-2023-4971.json

{
  "id": "CVE-2023-4971",
  "sourceIdentifier": "contact@wpscan.com",
  "published": "2023-10-16T20:15:17.403",
  "lastModified": "2023-10-17T12:38:17.143",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import  a malicious file and a suitable gadget chain is present on the blog."
    },
    {
      "lang": "es",
      "value": "El complemento Weaver Xtreme Theme Support de WordPress anterior a 6.3.1 deserializa el contenido de un archivo importado, lo que podr\u00eda provocar problemas de inyecciones de objetos PHP cuando un usuario con altos privilegios importa un archivo malicioso y hay una cadena de gadgets adecuada en el blog."
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "contact@wpscan.com",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/421194e1-6c3f-4972-8f3c-de1b9d2bcb13",
      "source": "contact@wpscan.com"
    }
  ]
}