Ultimate Reviews, 75ad8726-09a5-49b7-9534-61371a543764
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Ultimate Reviews [ultimate-reviews] < 2.1.33 Ultimate Reviews < 2.1.33 - Unauthenticated PHP Object Injection There were three occurrences in the plugin where an unauthenticated user could inject a serialized PHP object via a cookie, which could potentially lead to a PHP object injection vulnerability.
- Affected versions
-
max 2.1.33.
- Status
-
vulnerable