PT-2024-13569 · Unknown · Trustindex.Io Widgets For Google Reviews

Rafie Muhammad · Published 2024-03-26 · Updated 2024-03-27 · CVE-2023-48275

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trustindex.Io Widgets for Google Reviews versions n/a through 11.0.2

Description The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Widgets for Google Reviews. This could potentially allow for malicious file uploads. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions n/a through 11.0.2, update to a version later than 11.0.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-48275

Affected Products

Trustindex.Io Widgets For Google Reviews

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-48275 · Security Note
• https://patchstack.com/database/vulnerability/wp-reviews-plugin-for-google/wordpress-widgets-for-google-reviews-plugin-11-0-2-arbitrary-file-upload-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1772728576452038714 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1772756765114867913 · Twitter Post