Vulnerabilities > CVE-2023-6991 - Server-Side Request Forgery (SSRF) vulnerability in Surniaulula JSM File GET Contents() Shortcode 2.7.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |