Path Traversal Vulnerability Affects Easy Social Share Buttons

CVE-2024-31300

What is CVE-2024-31300?

The vulnerability in Easy Social Share Buttons by Appscreo arises from improper limitations of pathname access, potentially allowing unauthorized file inclusion through PHP. This flaw could permit an attacker to exploit the application by injecting malicious payloads, leveraging sensitive files on the server. Versions of Easy Social Share Buttons from n/a through 9.4 are affected, necessitating prompt remediation to mitigate the risks associated with this security issue.

References