CVE-2015-4617

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.

Score

CVSS 3.0 7.5 High

Status

Modified - larry0@me.com

Published

2019-02-15

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Easy2map-photos (Easy2map)
• Easy2map-photos Wordpress Plugin (Steven Ellis)

References

• http://www.vapidlabs.com/advisory.php?v=130
• https://wordpress.org/plugins/easy2map-photos