O se faʻafitauli matuia (CVE e leʻi tuʻuina atu) ua faʻaalia i le Ninja Forms WordPress add-on, lea e sili atu ma le miliona faʻapipiʻi faʻaogaina, faʻatagaina se tagata asiasi e leʻi faʻatagaina e maua le pule atoatoa o le saite. O le mataupu na foia i faʻasalalauga 3.0.34.2, 3.1.10, 3.2.28, 3.3.21.4, 3.4.34.2, 3.5.8.4, ma le 3.6.11. O loʻo maitauina o le faʻafitauli o loʻo faʻaaogaina e faia ai osofaʻiga ma faʻalavelave faʻafuaseʻi le faʻafitauli, o le au atiaʻe o le WordPress platform na amataina le faʻapipiʻiina otometi o le faʻafouga i luga o nofoaga faʻaoga.
O le faʻafitauli e mafua mai i se mea sese i le faʻatinoga o le Merge Tags functionality, lea e mafai ai e tagata faʻaoga le faʻamaonia ona valaʻau ni auala faʻapitoa mai vasega eseese o Ninja Forms (o le is_callable() galuega na valaʻauina e siaki pe na taʻua auala i faʻamatalaga na pasia e Merge fa'ailoga). Faatasi ai ma isi mea, na mafai ona taʻua se auala e faʻaumatia ai mea na lafoina e le tagata faʻaoga. E ala i le tuʻuina atu o faʻamaumauga faʻapipiʻi faʻapitoa, e mafai e le tagata osofaʻi ona suitulaga i ana lava mea faitino ma ausia le faʻatinoina o le PHP code i luga o le server poʻo le tapeina o faila faʻasalalau i totonu o le lisi ma faʻamatalaga nofoaga.
puna: opennet.ru