Path Traversal Vulnerability in PluginsWare Advanced Classifieds & Directory Pro

CVE-2024-37501

What is CVE-2024-37501?

The vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows attackers to exploit an improper limitation of a pathname to a restricted directory, leading to potential unauthorized access to sensitive files. This issue impacts versions from n/a up to and including 3.1.3, enabling the possibility of local file inclusion attacks. Protection against such vulnerabilities is crucial for maintaining the integrity and security of web applications using this software.

References