CVE-2024-11429 | galdub Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews Plugin Shortcode stars-testimonials-with-slider-and-masonry-grid filename control

A vulnerability was found in galdub Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews Plugin up to 3.3.3 on WordPress. It has been declared as problematic. This vulnerability affects the function stars-testimonials-with-slider-and-masonry-grid of the component Shortcode Handler. The manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability was named CVE-2024-11429. An attack has to be approached locally. There is no exploit available.