CVE-2022-24664

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:php_everywhere_project:php_everywhere:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-02-16 09:15

Updated : 2022-02-24 07:19


NVD link : CVE-2022-24664

Mitre link : CVE-2022-24664


JSON object : View

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

dedicated server usa

Products Affected

php_everywhere_project

  • php_everywhere