Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-5355

Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion

Description

The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Awesome Support

Default version status: unaffected

  • 0 to < 6.1.5affected

References