The ToTop Link WordPress plugin through 1.7.1 passes... · CVE-2021-24857 · GitHub Advisory Database · GitHub

The ToTop Link WordPress plugin through 1.7.1 passes...

Critical severity Unreviewed Published Dec 14, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The ToTop Link WordPress plugin through 1.7.1 passes base64 encoded user input to the unserialize() PHP function, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain.

References

Published by the National Vulnerability Database

Dec 13, 2021

Published to the GitHub Advisory Database Dec 14, 2021

Last updated Feb 1, 2023