Vulnerabilities > Surniaulula

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-15	CVE-2023-6991	Server-Side Request Forgery (SSRF) vulnerability in Surniaulula JSM File GET Contents() Shortcode The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks. network low complexity surniaulula CWE-918	8.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Surniaulula {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Surniaulula"}]}

Vulnerabilities > Surniaulula