CVE-2024-37091 – Improper Neutralization of Special Elements used in a Command (‘Command Injection’) …

Vuln ID: CVE-2024-37091

Published:  2024-06-24  12:15:10.170

Description: Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in StylemixThemes Consulting Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0.

Base Score: 9.9 – CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):