Vulnerability Details CVE-2023-6991
The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.7%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-6991
-
cpe:2.3:a:surniaulula:jsm_file_get_contents()_shortcode:-
-
cpe:2.3:a:surniaulula:jsm_file_get_contents()_shortcode:2.7.0