Path Traversal Vulnerability Affects Event post

CVE-2024-38735

Summary

The vulnerability in the N.O.U.S. Open Useful and Simple Event plugin allows for path traversal, enabling attackers to access unauthorized files on the server through PHP local file inclusion. This weakness affects versions of the Event post plugin up to and including 5.9.5. Malicious actors can exploit this flaw to manipulate file paths, potentially compromising the security of the web application and the server it runs on.

References