漏洞标题
MetaSlider插件 <= 3.94.0版本PHP对象注入漏洞
漏洞描述信息
MetaSlider 响应式幻灯片插件中存在不受信任数据的反序列化漏洞,允许对象注入。此问题影响 MetaSlider 响应式幻灯片插件:从 n/a 至 3.94.0 版本。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
可信数据的反序列化
漏洞标题
WordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerability
漏洞描述信息
Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider allows Object Injection. This issue affects Responsive Slider by MetaSlider: from n/a through 3.94.0.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
可信数据的反序列化