cleantalk
Vulnerabilities and Security Researches

Awesome Support – WordPress HelpDesk & Support Plugin, CVE-2023-5355

CVE, Research URL

CVE-2023-5355

Published on
Nov 07, 2023
Research Description
The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.
Affected versions
Min -, max 6.1.5.
Status
vulnerable