Plesk extension "Site Import" vulnerabilities
1 known vulnerability in Plesk extension "Site Import" from WebPros. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.2average CVSS score
Latest first
- 9.2 Critical severity
Plesk extension "Site Import": Improper Limitation of a Pathname to a Restricted Directory
The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal. This lets a non-owner subscription user redirect a privileged backend session into a directory they control, resulting in arbitr