Unscored CVE-2015-4617 EUVD-2015-4637GHSA-qr32-x399-q68j

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying …

Published Feb 15, 2019 · Updated Aug 6, 2024 · Assigned by larry_cashdollar

Vendor: Steven Ellis Product: Easy2map-photos WordPress Plugin Category: Web / CMS

Description

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.

Affected products

Vendor	Product	Affected	Fixed
Steven Ellis	Easy2map-photos WordPress Plugin	1.09	—

References

https://wordpress.org/plugins/easy2map-photos
http://www.vapidlabs.com/advisory.php?v=130