CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1657

Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file calls the load_control_panel_pane function. It is possible to use this action to include any local PHP file via the slug parameter. The Jupiter theme has a nearly identical vulnerability which can be exploited via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2022-1657

Artbees » Jupiter » Version: N/A

cpe:2.3:a:artbees:jupiter:-
Artbees » Jupiter » Version: 6.10.1

cpe:2.3:a:artbees:jupiter:6.10.1
Artbees » Jupiterx » Version: N/A

cpe:2.3:a:artbees:jupiterx:-
Artbees » Jupiterx » Version: 1.10.0

cpe:2.3:a:artbees:jupiterx:1.10.0
Artbees » Jupiterx » Version: 1.11.0

cpe:2.3:a:artbees:jupiterx:1.11.0
Artbees » Jupiterx » Version: 1.12.0

cpe:2.3:a:artbees:jupiterx:1.12.0
Artbees » Jupiterx » Version: 1.13.0

cpe:2.3:a:artbees:jupiterx:1.13.0
Artbees » Jupiterx » Version: 1.14.0

cpe:2.3:a:artbees:jupiterx:1.14.0
Artbees » Jupiterx » Version: 1.15.0

cpe:2.3:a:artbees:jupiterx:1.15.0
Artbees » Jupiterx » Version: 1.15.1

cpe:2.3:a:artbees:jupiterx:1.15.1
Artbees » Jupiterx » Version: 1.16.0

cpe:2.3:a:artbees:jupiterx:1.16.0
Artbees » Jupiterx » Version: 1.17.0

cpe:2.3:a:artbees:jupiterx:1.17.0
Artbees » Jupiterx » Version: 1.17.1

cpe:2.3:a:artbees:jupiterx:1.17.1
Artbees » Jupiterx » Version: 1.18.0

cpe:2.3:a:artbees:jupiterx:1.18.0
Artbees » Jupiterx » Version: 1.18.1

cpe:2.3:a:artbees:jupiterx:1.18.1
Artbees » Jupiterx » Version: 1.19.0

cpe:2.3:a:artbees:jupiterx:1.19.0
Artbees » Jupiterx » Version: 1.20.0

cpe:2.3:a:artbees:jupiterx:1.20.0
Artbees » Jupiterx » Version: 1.20.1

cpe:2.3:a:artbees:jupiterx:1.20.1
Artbees » Jupiterx » Version: 1.21.0

cpe:2.3:a:artbees:jupiterx:1.21.0
Artbees » Jupiterx » Version: 1.22.0

cpe:2.3:a:artbees:jupiterx:1.22.0
Artbees » Jupiterx » Version: 1.22.1

cpe:2.3:a:artbees:jupiterx:1.22.1
Artbees » Jupiterx » Version: 1.23.0

cpe:2.3:a:artbees:jupiterx:1.23.0
Artbees » Jupiterx » Version: 1.24.0

cpe:2.3:a:artbees:jupiterx:1.24.0
Artbees » Jupiterx » Version: 1.25.0

cpe:2.3:a:artbees:jupiterx:1.25.0
Artbees » Jupiterx » Version: 1.25.1

cpe:2.3:a:artbees:jupiterx:1.25.1
Artbees » Jupiterx » Version: 1.26.0

cpe:2.3:a:artbees:jupiterx:1.26.0
Artbees » Jupiterx » Version: 1.5.0

cpe:2.3:a:artbees:jupiterx:1.5.0
Artbees » Jupiterx » Version: 1.6.0

cpe:2.3:a:artbees:jupiterx:1.6.0
Artbees » Jupiterx » Version: 1.7.0

cpe:2.3:a:artbees:jupiterx:1.7.0
Artbees » Jupiterx » Version: 1.8.0

cpe:2.3:a:artbees:jupiterx:1.8.0
Artbees » Jupiterx » Version: 1.8.1

cpe:2.3:a:artbees:jupiterx:1.8.1
Artbees » Jupiterx » Version: 1.9.0

cpe:2.3:a:artbees:jupiterx:1.9.0
Artbees » Jupiterx » Version: 1.9.1

cpe:2.3:a:artbees:jupiterx:1.9.1
Artbees » Jupiterx » Version: 2.0.0

cpe:2.3:a:artbees:jupiterx:2.0.0
Artbees » Jupiterx » Version: 2.0.1

cpe:2.3:a:artbees:jupiterx:2.0.1
Artbees » Jupiterx » Version: 2.0.4

cpe:2.3:a:artbees:jupiterx:2.0.4
Artbees » Jupiterx » Version: 2.0.5

cpe:2.3:a:artbees:jupiterx:2.0.5
Artbees » Jupiterx » Version: 2.0.6

cpe:2.3:a:artbees:jupiterx:2.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1657

Products

Pricing

Contact Us