CVE-2023-2117 — Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal
The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the get_subdirs ajax action, allowing a high privileged users such …
Published: 2023-05-30 · CVSS: 2.7 · CVSS 3.1
The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the get_subdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7