Mailster Vulnerable to Path Traversal Attack

CVE-2024-32523

Summary

The EverPress Mailster plugin is susceptible to a Path Traversal vulnerability, which can lead to Local File Inclusion in PHP. This flaw arises from improper validation of input, allowing an attacker to manipulate directory paths and access sensitive files on the server. The vulnerability affects Mailster versions up to 4.0.6, posing a significant risk. Proper file path validation should be implemented to mitigate potential exploitation.

References