Ultimate Reviews < 2.1.33 - Unauthenticated PHP Object Injection
Description
There were three occurrences in the plugin where an unauthenticated user could inject a serialized PHP object via a cookie, which could potentially lead to a PHP object injection vulnerability.
Affects Plugins
Fixed in version 2.1.33✓
Classification
Miscellaneous
Original Researcher
Jerome Bruandet (nintechnet)
Verified
No
Timeline
Publicly Published
2020-11-10 (about 8 months ago)
Added
2020-11-10 (about 8 months ago)
Last Updated
2020-11-11 (about 8 months ago)