Path Traversal Vulnerability Affects Cities Shipping Zones for WooCommerce

CVE-2024-47309

6.6MEDIUM

Key Information

Vendor: Condless
Status: Cities Shipping Zones For WooCommerce
Vendor: CVE Published:; 5 October 2024

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Condless Cities Shipping Zones for WooCommerce allows PHP Local File Inclusion.This issue affects Cities Shipping Zones for WooCommerce: from n/a through 1.2.7.

Affected Version(s)

Cities Shipping Zones for WooCommerce <= 1.2.7

CVSS V3.1

Score:

6.6

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Oct 5, 2024
Vulnerability Reserved.
Sep 24, 2024

Collectors

NVD DatabaseMitre Database

Credit

h0j3n (Patchstack Alliance)