Read the docs

Smartlogix

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Smartlogix records in CISA KEV

No Smartlogix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Wp-insert · all components

Priority MEDIUM 48

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/edito…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03364 Published 2018-09-28 No fix listed CWE-434
Open these records in search →