Path Traversal Vulnerability Affects WishList Member X

CVE-2024-37108

7.7HIGH

Key Information

Vendor: Wishlist Products
Status: Wishlist Member X
Vendor: CVE Published:; 1 November 2024

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishList Member X allows Path Traversal.This issue affects WishList Member X: from n/a through 3.26.6.

Affected Version(s)

WishList Member X <= 3.26.6

CVSS V3.1

Score:

7.7

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Changed

Timeline

Vulnerability published.
Nov 1, 2024
Vulnerability Reserved.
Jun 3, 2024

Collectors

NVD DatabaseMitre Database

Credit

Dave Jong (Patchstack)