mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-05 02:28:16 +02:00
712 B
712 B
CVE-2020-24143
Description
Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.
POC
Reference
No PoCs from references.