ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-24143”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-24143
Published
2021-07-07
CVSS:
7.5
ShadowTrackr CVSS:
6.9
Summary:
Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.