CVEs-PoC/2022/CVE-2022-3357.md

CVE-2022-3357

Description

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

POC

Reference

• https://wpscan.com/vulnerability/2e28a4e7-e7d3-485c-949c-e300e5b66cbd

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/iamz24/CVE-2021-3493_CVE-2022-3357