Beta

Report

Media: oEmbed < 7.x-2.8 is vulnerable to Authenticated Remote Code Execution (RCE) vulnerability

Authenticated
Published
2020-11-17

Authenticated Remote Code Execution (RCE) vulnerability

CVSS

Score:9

Severity:Critical

Version:< 7.x-2.8

There is a patch available in v2.9 and we strongly recommend you update to this version as soon as possible.