Security Advisory

CVE-2020-24143

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-07-07 13:35:50

Last updated 2024-08-04 15:05:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.

← Browse all CVEs View on cve.org ↗